diff --git a/appco/README.md b/appco/README.md
new file mode 100644
index 0000000..d2604e4
--- /dev/null
+++ b/appco/README.md
@@ -0,0 +1,17 @@
+# AppCo Example
+
+This example will deploy the [Istio SUSE Application Collection](https://apps.rancher.io/applications/istio). 
+The app will be deployed into the `istio-system` namespace. Note that you must have create the `application-collection` secret into the `istio-system` namespace using the [AppCo Username](https://apps.rancher.io/settings/profile) as username and the [AppCo Access token](https://apps.rancher.io/settings/access-tokens) as password.
+
+```yaml
+kind: GitRepo
+apiVersion: fleet.cattle.io/v1alpha1
+metadata:
+  name: appcotest
+  namespace: fleet-local
+spec:
+  repo: https://github.com/rancher/fleet-examples
+  branch: master
+  paths:
+  - appco
+```
\ No newline at end of file
diff --git a/appco/fleet.yaml b/appco/fleet.yaml
new file mode 100644
index 0000000..22a606d
--- /dev/null
+++ b/appco/fleet.yaml
@@ -0,0 +1,23 @@
+defaultNamespace: istio-system
+helm:
+  releaseName: rancher-istio
+  chart: "oci://dp.apps.rancher.io/charts/istio"
+  version: "0.8.1"
+  force: false
+  timeoutSeconds: 0
+  targetNamespace: istio-system
+  values:
+    global:
+      imagePullSecrets: [ "application-collection" ]
+diff:
+  comparePatches:
+  - apiVersion: admissionregistration.k8s.io/v1
+    kind: ValidatingWebhookConfiguration
+    name: istio-validator-istio-system
+    operations:
+    - {"op": "remove", "path":"/webhooks"}
+  - apiVersion: admissionregistration.k8s.io/v1
+    kind: ValidatingWebhookConfiguration
+    name: istiod-default-validator
+    operations:
+    - {"op": "remove", "path":"/webhooks"}