From 3e52afe834599927da9b7ff61d84266c941ab763 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?St=C3=A9phane=20Tailland?= <stephane.tailland@ibm.com>
Date: Sun, 23 Aug 2026 14:39:55 +0200
Subject: [PATCH] Switch to local keycloak

---
 dev/api-gateway/policies-kustomization.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/dev/api-gateway/policies-kustomization.yaml b/dev/api-gateway/policies-kustomization.yaml
index 7ff3cf6..e0a2c62 100644
--- a/dev/api-gateway/policies-kustomization.yaml
+++ b/dev/api-gateway/policies-kustomization.yaml
@@ -29,6 +29,7 @@ spec:
       # Every audience valid anywhere in the catalog domain — grows as the
       # domain gains APIs.
       JWT_AUDIENCE_WHITELIST: '["catalog-api", "mcp-catalog"]'
+      OIDC_ISSUER: https://keycloak.sttlab.local/realms/classic-models
     substituteFrom:
       - kind: ConfigMap
         name: dataplane-template-defaults