Merge pull request #267650 from CocoWang-wql/patch-57

Update use-oidc-issuer.md

Author: prmerger-automator[bot]

articles/aks/use-oidc-issuer.md

@@ -3,7 +3,7 @@ title: Create an OpenID Connect provider for your Azure Kubernetes Service (AKS)
 description: Learn how to configure the OpenID Connect (OIDC) provider for a cluster in Azure Kubernetes Service (AKS)
 ms.topic: article
 ms.custom: devx-track-azurecli
-ms.date: 11/10/2023
+ms.date: 03/04/2024
 ---
 
 # Create an OpenID Connect provider on Azure Kubernetes Service (AKS)
@@ -20,6 +20,9 @@ In this article, you learn how to create, update, and manage the OIDC Issuer for
 > [!IMPORTANT]
 > After enabling OIDC issuer on the cluster, it's not supported to disable it.
 
+> [!IMPORTANT]
+> The token needs to be refreshed periodically. If you use [SDK][sdk], the rotation is automatic, otherwise, you need to refresh the token every 24 hours manually.
+
 ## Prerequisites
 
 * The Azure CLI version 2.42.0 or higher. Run `az --version` to find your version. If you need to install or upgrade, see [Install Azure CLI][azure-cli-install].
@@ -142,6 +145,7 @@ During key rotation, there's one other key present in the discovery document.
 
 <!-- LINKS - internal -->
 [open-id-connect-overview]: ../active-directory/fundamentals/auth-oidc.md
+[sdk]: workload-identity-overview.md#azure-identity-client-libraries
 [azure-cli-install]: /cli/azure/install-azure-cli
 [az-aks-create]: /cli/azure/aks#az-aks-create
 [az-aks-update]: /cli/azure/aks#az-aks-update