diff --git a/argo/apps/istio.zip b/argo/apps/istio.zip
new file mode 100644
index 0000000..6a31d50
Binary files /dev/null and b/argo/apps/istio.zip differ
diff --git a/helm/istio-ingress-manager/values.yaml b/helm/istio-ingress-manager/values.yaml
index 6b485a2..78b9149 100644
--- a/helm/istio-ingress-manager/values.yaml
+++ b/helm/istio-ingress-manager/values.yaml
@@ -52,7 +52,7 @@ applications:
       issuerName: "letsencrypt-cloudflare"
       issuerKind: ClusterIssuer
       # Override where the Secret is created (e.g., "istio-system" or keep empty for app namespace)
-      createSecretInNamespace: "" # Default: uses 'namespace' field above
+      createSecretInNamespace: "istio-system" # Default: uses 'namespace' field above
 
   # --- Example for NTFY ---
   # - name: ntfy