diff --git a/dev/api-gateway/policies-kustomization.yaml b/dev/api-gateway/policies-kustomization.yaml
index 7ff3cf6..e0a2c62 100644
--- a/dev/api-gateway/policies-kustomization.yaml
+++ b/dev/api-gateway/policies-kustomization.yaml
@@ -29,6 +29,7 @@ spec:
       # Every audience valid anywhere in the catalog domain — grows as the
       # domain gains APIs.
       JWT_AUDIENCE_WHITELIST: '["catalog-api", "mcp-catalog"]'
+      OIDC_ISSUER: https://keycloak.sttlab.local/realms/classic-models
     substituteFrom:
       - kind: ConfigMap
         name: dataplane-template-defaults