diff --git a/argocd/applications/cluster-secrets/argocd.yaml b/argocd/applications/cluster-secrets/argocd.yaml
index f4d9980..6d0e57c 100644
--- a/argocd/applications/cluster-secrets/argocd.yaml
+++ b/argocd/applications/cluster-secrets/argocd.yaml
@@ -1,18 +1,23 @@
 # Declare the application applying the argocd cluster secrets
 # like the repositories credentials, the cluster definitions, ...
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: production-argocd-secrets
   namespace: argocd
 spec:
   project: default # Todo define a project to limit the deployment types
   source:
     repoURL: ssh://git@forge.softwareheritage.org/source/k8s-swh-private-data.git
     targetRevision: HEAD
     path: argocd
     directory:
       recurse: true
   destination:
     server: https://kubernetes.default.svc
     namespace: argocd
+  syncPolicy:
+    automated:
+    prune: true
+    selfHeal: true
+    allowEmpty: false
diff --git a/argocd/applications/cluster-secrets/production-cassandra.yaml b/argocd/applications/cluster-secrets/production-cassandra.yaml
index 406d8f5..1db6153 100644
--- a/argocd/applications/cluster-secrets/production-cassandra.yaml
+++ b/argocd/applications/cluster-secrets/production-cassandra.yaml
@@ -1,16 +1,21 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: production-cassandra-secrets
   namespace: argocd
 spec:
   project: default # Todo define a project to limit the deployment types
   source:
     repoURL: https://forge.softwareheritage.org/source/k8s-private-config.git
     targetRevision: HEAD
     path: production-cassandra
     directory:
       recurse: true
   destination:
     server: https://rancher.euwest.azure.internal.softwareheritage.org/k8s/clusters/c-pcndd
     namespace: default
+  syncPolicy:
+    automated:
+    prune: true
+    selfHeal: true
+    allowEmpty: false