Answer
selfHeal makes ArgoCD automatically revert live changes that deviate from Git, even if the change wasn't via Git (e.g., a manual kubectl edit). It enforces Git as the source of truth and prevents drift, but can fight tools that legitimately mutate resources, so it's used where Git should fully own the state.
syncPolicy:
automated:
selfHeal: trueReal-world example A manual replica change is reverted within a reconciliation cycle because selfHeal restores the Git-defined value.