diff --git a/ingress/gateway-ingress.yaml b/ingress/gateway-ingress.yaml
index 52e559c..8a16461 100644
--- a/ingress/gateway-ingress.yaml
+++ b/ingress/gateway-ingress.yaml
@@ -30,7 +30,7 @@ spec:
         pathType: ImplementationSpecific
       - backend:
           service:
-            name: old-csi-net-empiread #csi-central-authentication-service #api-gateway-noauth #csi-central-authentication-service
+            name: old-csi-net-empiread
             port:
               number: 80
         path: /(.*csi-api/old-csi-net-empiread/)(.*)
diff --git a/ingress/new-keycloak-ingress.yaml b/ingress/new-keycloak-ingress.yaml
new file mode 100644
index 0000000..bf86c08
--- /dev/null
+++ b/ingress/new-keycloak-ingress.yaml
@@ -0,0 +1,19 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: auth-redirect
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /realms/$2
+    nginx.ingress.kubernetes.io/use-regex: "true"
+spec:
+  rules:
+  - host: quat.cloudsolutions.lk
+    http:
+      paths:
+      - path: /auth/realms(/|$)(.*)
+        pathType: Prefix
+        backend:
+          service:
+            name: csi-iam-service
+            port:
+              number: 80
\ No newline at end of file