Jwt issuer is not configured

Security
1

I’m running into this error when trying to allow a jwt token through the ingress-gateway.
error:

Jwt issuer is not configured

My istio’s namespace is where the RequestAuthentication and the AuthorizationPolicy are set. My app is running in a different namespace.

Here are the rules:

kind: AuthorizationPolicy
metadata:
  name: jwt-rule
  namespace: istio-system
spec:
  rules:
  - from:
    - source:
        requestPrincipals:
        - '*'
  selector:
    matchLabels:
      protect: authservice
---
apiVersion: security.istio.io/v1beta1
kind: RequestAuthentication
metadata:
  name: jwt-rule
  namespace: istio-system
spec:
  jwtRules:
  - forwardOriginalToken: true
    issuer: https://keycloak.example.com/auth/realms/test
    jwks: '..removed..'
  - forwardOriginalToken: true
    issuer: https://app.example.com
    jwksUri: https://app.example.com/v1/.well-known/jwks.json
  selector:
    matchLabels:
      protect: authservice

gateway’s log

TIMESTAMP "GET /v1/websoc/info?access_token=<JWTHERE>&t=1661895689934 HTTP/1.1" 401 - jwt_authn_access_denied{Jwt_issuer_is_not_configured} - "-" 0 28 2 - "IP,IP" "<USER AGENT>" "f621212e-4415-459a-a06b-7be252500dd5" "app.example.com" "-" outbound|1003||apigateway.app.svc.cluster.local -IP:8443 IP:45187 app.example.com -