diff --git a/k8s/configmap.yaml b/k8s/configmap.yaml
index f5a0807..b1c62b8 100644
--- a/k8s/configmap.yaml
+++ b/k8s/configmap.yaml
@@ -15,9 +15,9 @@ data:
       enabled: true
       issuer: "https://authentik.riotpiao.com/application/o/api-gw/"
       audience: "api-gw"
-      jwksUrl: "http://authentik-server.iam.svc.cluster.local/application/o/api-gw/jwks/"
+      jwksUrl: "http://authentik-server.iam.svc.cluster.local:9000/application/o/api-gw/jwks/"
       requiredCapability: "llm:inference"
-      tokenUrl: "http://authentik-server.iam.svc.cluster.local/application/o/token/"
+      tokenUrl: "http://authentik-server.iam.svc.cluster.local:9000/application/o/token/"
       clientId: "api-gw"
     
     # Routes: standard HTTP proxy routes (not LLM-specific)
@@ -137,7 +137,7 @@ data:
 
     - serviceName: iam
       upstream:
-        url: http://authentik-server.iam.svc.cluster.local:80
+        url: http://authentik-server.iam.svc.cluster.local:9000
         timeoutSeconds: 30
       auth:
         required: false