diff --git a/k8s/configmap.yaml b/k8s/configmap.yaml
index ac64ba2..b5848b3 100644
--- a/k8s/configmap.yaml
+++ b/k8s/configmap.yaml
@@ -13,10 +13,10 @@ data:
     # JWT Authentication for /v1/* endpoints (LLM API)
     auth:
       enabled: true
-      issuer: "http://authentik-server.iam.svc.cluster.local/application/o/local-llm/"
-      audience: "local-llm"
-      jwksUrl: "http://authentik-server.iam.svc.cluster.local/application/o/local-llm/jwks/"
-      requiredCapability: "llm:inference"
+      issuer: "https://authentik.riotpiao.com/application/o/portfolio-agent/"
+      audience: "portfolio-agent"
+      jwksUrl: "http://authentik-server.iam.svc.cluster.local/application/o/portfolio-agent/jwks/"
+      requiredCapability: ""
     
     # Routes: standard HTTP proxy routes (not LLM-specific)
     # These are for non-LLM services (agent-pod/console, etc.)