diff --git a/appco/README.md b/appco/README.md
index 736b2c0..d2604e4 100644
--- a/appco/README.md
+++ b/appco/README.md
@@ -1,7 +1,7 @@
 # AppCo Example
 
 This example will deploy the [Istio SUSE Application Collection](https://apps.rancher.io/applications/istio). 
-The app will be deployed into the `istio-system` namespace. 
+The app will be deployed into the `istio-system` namespace. Note that you must have create the `application-collection` secret into the `istio-system` namespace using the [AppCo Username](https://apps.rancher.io/settings/profile) as username and the [AppCo Access token](https://apps.rancher.io/settings/access-tokens) as password.
 
 ```yaml
 kind: GitRepo
diff --git a/appco/fleet.yaml b/appco/fleet.yaml
index bcf4ea7..22a606d 100644
--- a/appco/fleet.yaml
+++ b/appco/fleet.yaml
@@ -6,3 +6,18 @@ helm:
   force: false
   timeoutSeconds: 0
   targetNamespace: istio-system
+  values:
+    global:
+      imagePullSecrets: [ "application-collection" ]
+diff:
+  comparePatches:
+  - apiVersion: admissionregistration.k8s.io/v1
+    kind: ValidatingWebhookConfiguration
+    name: istio-validator-istio-system
+    operations:
+    - {"op": "remove", "path":"/webhooks"}
+  - apiVersion: admissionregistration.k8s.io/v1
+    kind: ValidatingWebhookConfiguration
+    name: istiod-default-validator
+    operations:
+    - {"op": "remove", "path":"/webhooks"}