diff --git a/examples/webmesh-desktop/deploy/app-secrets.yaml b/examples/webmesh-desktop/deploy/app-secrets.yaml
deleted file mode 100644
index 56762de..0000000
--- a/examples/webmesh-desktop/deploy/app-secrets.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
----
-# Dummy OIDC client credentials for the Webmesh Desktop.
-apiVersion: v1
-kind: Secret
-metadata:
-  name: kvdi-app-secrets
-  namespace: default
-stringData:
-  oidc-clientid: "kvdi"
-  oidc-clientsecret: "kvdi"
diff --git a/examples/webmesh-desktop/deploy/desktop-values.yaml b/examples/webmesh-desktop/deploy/desktop-values.yaml
deleted file mode 100644
index d70dc8f..0000000
--- a/examples/webmesh-desktop/deploy/desktop-values.yaml
+++ /dev/null
@@ -1,14 +0,0 @@
-manager:
-  image:
-    repository: ghcr.io/webmeshproj/vdi-manager
-    tag: latest
-vdi:
-  spec:
-    app:
-      image: ghcr.io/webmeshproj/vdi-app:latest
-      serviceType: ClusterIP
-    auth:
-      tokenDuration: 8h
-      oidcAuth:
-        issuerURL: http://169.254.169.254
-        redirectURL: https://kvdi.default.svc.cluster.local/api/login
diff --git a/examples/webmesh-desktop/deploy/kustomization.yaml b/examples/webmesh-desktop/deploy/kustomization.yaml
index 35a27d7..3fccfe5 100644
--- a/examples/webmesh-desktop/deploy/kustomization.yaml
+++ b/examples/webmesh-desktop/deploy/kustomization.yaml
@@ -1,12 +1,11 @@
-# This patches the default Webmesh DaemonSet to enable the
-# gRPC API and ID authentication. It mounts in the secret
-# from allowed-ids.yaml and watches it for changes.
+---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: kube-system
 resources:
 - ../../../deploy
 - allowed-ids.yaml
+- https://github.com/webmeshproj/webmesh-vdi/raw/main/deploy/bundle.yaml
 labels:
 - includeSelectors: true
   pairs:
diff --git a/examples/webmesh-desktop/deploy/vdi-spec.yaml b/examples/webmesh-desktop/deploy/vdi-spec.yaml
new file mode 100644
index 0000000..b474150
--- /dev/null
+++ b/examples/webmesh-desktop/deploy/vdi-spec.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: desktops
+---
+apiVersion: app.kvdi.io/v1
+kind: VDICluster
+metadata:
+  name: vdi
+spec:
+  appNamespace: desktops
+  app:
+    image: "ghcr.io/webmeshproj/vdi-app:latest"
+    replicas: 1
+    serviceType: ClusterIP
+  auth:
+    adminSecret: kvdi-admin-secret
+    allowAnonymous: false
+    webmeshAuth:
+      metadataURL: http://169.254.169.254
+    tokenDuration: 8h
+  desktops:
+    maxSessionLength: 8h
+  secrets:
+    k8sSecret:
+      secretName: kvdi-app-secrets
+  userdataSpec: {}