Skip to content

Commit 63d79a7

Browse files
Merge pull request #220616 from MGoedtel/task47656
Added detail about OIDC token lifetime
2 parents 65e0c35 + a8e4f07 commit 63d79a7

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/aks/cluster-configuration.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to configure a cluster in Azure Kubernetes Service (AKS)
44
services: container-service
55
ms.topic: article
66
ms.custom: ignite-2022
7-
ms.date: 11/30/2022
7+
ms.date: 12/06/2022
88
---
99

1010
# Configure an AKS cluster
@@ -362,7 +362,7 @@ az aks update -n aks -g myResourceGroup --disable-node-restriction
362362

363363
## OIDC Issuer
364364

365-
You can enable an OIDC Issuer URL of the provider, which allows the API server to discover public signing keys.
365+
You can enable an OIDC Issuer URL of the provider, which allows the API server to discover public signing keys. The maximum lifetime of the token issued by the OIDC provider is 1 day.
366366

367367
> [!WARNING]
368368
> Enable or disable OIDC Issuer changes the current service account token issuer to a new value, which can cause down time and restarts the API server. If the application pods using a service token remain in a failed state after you enable or disable the OIDC Issuer, we recommend you manually restart the pods.

0 commit comments

Comments
 (0)