Skip to content

Commit 52fea05

Browse files
committed
add note for spliting token
1 parent 8ab91c2 commit 52fea05

File tree

2 files changed

+12
-0
lines changed
  • content/kubermatic
    • main/tutorials-howtos/oidc-provider-configuration
    • v2.28/tutorials-howtos/oidc-provider-configuration

2 files changed

+12
-0
lines changed

content/kubermatic/main/tutorials-howtos/oidc-provider-configuration/_index.en.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -107,6 +107,12 @@ spec:
107107
"oidc_logout_url": "https://keycloak.kubermatic.test/auth/realms/test/protocol/openid-connect/logout"
108108
}
109109
```
110+
{{% notice note %}}
111+
When the user token size exceeds the browser's cookie size limit (e.g., when the user is a member of many groups), the token is split across multiple cookies to ensure proper authentication.
112+
113+
External tools outside of KKP (e.g., Kubernetes Dashboard, Grafana, Prometheus) are not supported with multi-cookie tokens.
114+
{{% /notice %}}
115+
110116

111117
### Seed Configuration
112118

content/kubermatic/v2.28/tutorials-howtos/oidc-provider-configuration/_index.en.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -107,6 +107,12 @@ spec:
107107
"oidc_logout_url": "https://keycloak.kubermatic.test/auth/realms/test/protocol/openid-connect/logout"
108108
}
109109
```
110+
{{% notice note %}}
111+
When the user token size exceeds the browser's cookie size limit (e.g., when the user is a member of many groups), the token is split across multiple cookies to ensure proper authentication.
112+
113+
External tools outside of KKP (e.g., Kubernetes Dashboard, Grafana, Prometheus) are not supported with multi-cookie tokens.
114+
{{% /notice %}}
115+
110116

111117
### Seed Configuration
112118

0 commit comments

Comments
 (0)