From 61f1b3474783c0453de73c04b5692ea8fa49a450 Mon Sep 17 00:00:00 2001
From: Leonardo Scalabrini <leonardo.scalabrini@suse.com>
Date: Tue, 1 Jul 2025 13:40:21 -0300
Subject: [PATCH] Review changes

---
 appco/README.md  |  2 +-
 appco/fleet.yaml | 15 +++++++++++++++
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/appco/README.md b/appco/README.md
index 736b2c0..d2604e4 100644
--- a/appco/README.md
+++ b/appco/README.md
@@ -1,7 +1,7 @@
 # AppCo Example
 
 This example will deploy the [Istio SUSE Application Collection](https://apps.rancher.io/applications/istio). 
-The app will be deployed into the `istio-system` namespace. 
+The app will be deployed into the `istio-system` namespace. Note that you must have create the `application-collection` secret into the `istio-system` namespace using the [AppCo Username](https://apps.rancher.io/settings/profile) as username and the [AppCo Access token](https://apps.rancher.io/settings/access-tokens) as password.
 
 ```yaml
 kind: GitRepo
diff --git a/appco/fleet.yaml b/appco/fleet.yaml
index bcf4ea7..22a606d 100644
--- a/appco/fleet.yaml
+++ b/appco/fleet.yaml
@@ -6,3 +6,18 @@ helm:
   force: false
   timeoutSeconds: 0
   targetNamespace: istio-system
+  values:
+    global:
+      imagePullSecrets: [ "application-collection" ]
+diff:
+  comparePatches:
+  - apiVersion: admissionregistration.k8s.io/v1
+    kind: ValidatingWebhookConfiguration
+    name: istio-validator-istio-system
+    operations:
+    - {"op": "remove", "path":"/webhooks"}
+  - apiVersion: admissionregistration.k8s.io/v1
+    kind: ValidatingWebhookConfiguration
+    name: istiod-default-validator
+    operations:
+    - {"op": "remove", "path":"/webhooks"}