diff --git a/on-premise/main/rancher_v2.9.1/rancher/rancher-2.9.1.tgz b/on-premise/main/rancher_v2.9.1/rancher/rancher-2.9.1.tgz
new file mode 100644
index 0000000..d42ebc8
Binary files /dev/null and b/on-premise/main/rancher_v2.9.1/rancher/rancher-2.9.1.tgz differ
diff --git a/on-premise/main/rancher_v2.9.1/rancher/values.yaml b/on-premise/main/rancher_v2.9.1/rancher/values.yaml
index 2ee0ee1..63a5f1a 100644
--- a/on-premise/main/rancher_v2.9.1/rancher/values.yaml
+++ b/on-premise/main/rancher_v2.9.1/rancher/values.yaml
@@ -97,7 +97,7 @@ letsEncrypt:
     class: ""
 # If you are using certs signed by a private CA set to 'true' and set the 'tls-ca'
 # in the 'rancher-system' namespace. See the README.md for details
-privateCA: true
+privateCA: true 
 
 # http[s] proxy server passed into rancher server.
 # proxy: http://<username>@<password>:<url>:<port>
diff --git a/on-premise/servicemesh/istio-1.23.1/samples/addons/kiali-token.yaml b/on-premise/servicemesh/istio-1.23.1/samples/addons/kiali-token.yaml
new file mode 100644
index 0000000..e4e91ad
--- /dev/null
+++ b/on-premise/servicemesh/istio-1.23.1/samples/addons/kiali-token.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: kiali-admin-secret
+  namespace: istio-system
+  annotations:
+    kubernetes.io/service-account.name: kiali
+type: kubernetes.io/service-account-token
diff --git a/on-premise/servicemesh/istio-1.23.1/samples/addons/kiali.yaml b/on-premise/servicemesh/istio-1.23.1/samples/addons/kiali.yaml
index d0d1e32..95fa07e 100644
--- a/on-premise/servicemesh/istio-1.23.1/samples/addons/kiali.yaml
+++ b/on-premise/servicemesh/istio-1.23.1/samples/addons/kiali.yaml
@@ -41,7 +41,7 @@ data:
       openid: {}
       openshift:
         client_id_prefix: kiali
-      strategy: anonymous
+      strategy: token 
     clustering:
       autodetect_secrets:
         enabled: true