CI / CI (pull_request) Successful in 3m9s
NetworkPolicy allows gateway→iam only on ports 9000/9443, but config used port 80 for JWKS fetch and token endpoints. This caused 'operation not permitted' errors and JWKS refresh failures. Affects: - auth.jwksUrl: uses port 9000 (Authentik HTTP) - auth.tokenUrl: uses port 9000 for token exchange - iam adapter upstream: routes to port 9000 Fixes: Gateway unable to validate JWT tokens, all chat/inference requests returned 401 with 'token is unverifiable' error.