From 59fa0dcf4be9f5f66c1ec709d1ce5db62dd4e7d9 Mon Sep 17 00:00:00 2001
From: Leonardo Scalabrini <leonardo.scalabrini@suse.com>
Date: Tue, 24 Jun 2025 13:27:56 -0300
Subject: [PATCH 1/3] Testing Fleet + Appco + Istio

---
 appco/fleet.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 appco/fleet.yaml

diff --git a/appco/fleet.yaml b/appco/fleet.yaml
new file mode 100644
index 0000000..087b3ab
--- /dev/null
+++ b/appco/fleet.yaml
@@ -0,0 +1,8 @@
+defaultNamespace: istio-system
+helm:
+  releaseName: rancher-istio
+  chart: "oci://dp.apps.rancher.io/charts/istio"
+  version: "0.8.1"
+  force: false
+  timeoutSeconds: 0
+  targetNamespace: istio-system
\ No newline at end of file

From 008f983b31c28d83e13ea1b27450b0a1ab359ec6 Mon Sep 17 00:00:00 2001
From: Leonardo Scalabrini <leonardo.scalabrini@suse.com>
Date: Mon, 30 Jun 2025 14:32:00 -0300
Subject: [PATCH 2/3] Comment changes

---
 appco/README.md  | 17 +++++++++++++++++
 appco/fleet.yaml |  2 +-
 2 files changed, 18 insertions(+), 1 deletion(-)
 create mode 100644 appco/README.md

diff --git a/appco/README.md b/appco/README.md
new file mode 100644
index 0000000..736b2c0
--- /dev/null
+++ b/appco/README.md
@@ -0,0 +1,17 @@
+# AppCo Example
+
+This example will deploy the [Istio SUSE Application Collection](https://apps.rancher.io/applications/istio). 
+The app will be deployed into the `istio-system` namespace. 
+
+```yaml
+kind: GitRepo
+apiVersion: fleet.cattle.io/v1alpha1
+metadata:
+  name: appcotest
+  namespace: fleet-local
+spec:
+  repo: https://github.com/rancher/fleet-examples
+  branch: master
+  paths:
+  - appco
+```
\ No newline at end of file
diff --git a/appco/fleet.yaml b/appco/fleet.yaml
index 087b3ab..bcf4ea7 100644
--- a/appco/fleet.yaml
+++ b/appco/fleet.yaml
@@ -5,4 +5,4 @@ helm:
   version: "0.8.1"
   force: false
   timeoutSeconds: 0
-  targetNamespace: istio-system
\ No newline at end of file
+  targetNamespace: istio-system

From 61f1b3474783c0453de73c04b5692ea8fa49a450 Mon Sep 17 00:00:00 2001
From: Leonardo Scalabrini <leonardo.scalabrini@suse.com>
Date: Tue, 1 Jul 2025 13:40:21 -0300
Subject: [PATCH 3/3] Review changes

---
 appco/README.md  |  2 +-
 appco/fleet.yaml | 15 +++++++++++++++
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/appco/README.md b/appco/README.md
index 736b2c0..d2604e4 100644
--- a/appco/README.md
+++ b/appco/README.md
@@ -1,7 +1,7 @@
 # AppCo Example
 
 This example will deploy the [Istio SUSE Application Collection](https://apps.rancher.io/applications/istio). 
-The app will be deployed into the `istio-system` namespace. 
+The app will be deployed into the `istio-system` namespace. Note that you must have create the `application-collection` secret into the `istio-system` namespace using the [AppCo Username](https://apps.rancher.io/settings/profile) as username and the [AppCo Access token](https://apps.rancher.io/settings/access-tokens) as password.
 
 ```yaml
 kind: GitRepo
diff --git a/appco/fleet.yaml b/appco/fleet.yaml
index bcf4ea7..22a606d 100644
--- a/appco/fleet.yaml
+++ b/appco/fleet.yaml
@@ -6,3 +6,18 @@ helm:
   force: false
   timeoutSeconds: 0
   targetNamespace: istio-system
+  values:
+    global:
+      imagePullSecrets: [ "application-collection" ]
+diff:
+  comparePatches:
+  - apiVersion: admissionregistration.k8s.io/v1
+    kind: ValidatingWebhookConfiguration
+    name: istio-validator-istio-system
+    operations:
+    - {"op": "remove", "path":"/webhooks"}
+  - apiVersion: admissionregistration.k8s.io/v1
+    kind: ValidatingWebhookConfiguration
+    name: istiod-default-validator
+    operations:
+    - {"op": "remove", "path":"/webhooks"}