From b45bf7baf97fa5d4cbb2341ef882f7eaa2cb5630 Mon Sep 17 00:00:00 2001
From: archups <archupsawant@gmail.com>
Date: Thu, 3 Apr 2025 16:40:16 +0530
Subject: [PATCH] Fixed configuration snippet for refresh token issue
 workaround

Signed-off-by: archups <archupsawant@gmail.com>
---
 .../architecture/known-issues/_index.en.md    | 21 +++++++++++--------
 .../architecture/known-issues/_index.en.md    | 21 +++++++++++--------
 .../architecture/known-issues/_index.en.md    | 21 +++++++++++--------
 .../architecture/known-issues/_index.en.md    | 21 +++++++++++--------
 .../architecture/known-issues/_index.en.md    | 21 +++++++++++--------
 5 files changed, 60 insertions(+), 45 deletions(-)

diff --git a/content/kubermatic/main/architecture/known-issues/_index.en.md b/content/kubermatic/main/architecture/known-issues/_index.en.md
index 058c034c1..56f4bedc3 100644
--- a/content/kubermatic/main/architecture/known-issues/_index.en.md
+++ b/content/kubermatic/main/architecture/known-issues/_index.en.md
@@ -32,17 +32,20 @@ The following yaml snippet is an example how to configure an oidc connector to k
 
 ```yaml
     connectors:
-      - config:
+      - id: oidc
+        name: OIDC
+        type: Google
+        config:
           clientID: <client_id>
           clientSecret: <client_secret>
-          orgs:
-          - name: <github_organization>
-          redirectURI: https://kubermatic.test/dex/callback
-        id: github
-        name: GitHub
-        type: github
-        userIDKey: jti
-        userNameKey: email
+          redirectURI: https://kkp.example.com/dex/callback
+          scopes:
+            - openid
+            - profile
+            - email
+            - offline_access
+          # Workaround to support multiple user_id/client_id pairs concurrently
+          userIDKey: jti
 ```
 
 #### external provider
diff --git a/content/kubermatic/v2.24/architecture/known-issues/_index.en.md b/content/kubermatic/v2.24/architecture/known-issues/_index.en.md
index 0cc37510b..1ad4cece3 100644
--- a/content/kubermatic/v2.24/architecture/known-issues/_index.en.md
+++ b/content/kubermatic/v2.24/architecture/known-issues/_index.en.md
@@ -188,17 +188,20 @@ The following yaml snippet is an example how to configure an oidc connector to k
 
 ```yaml
     connectors:
-      - config:
+      - id: oidc
+        name: OIDC
+        type: Google
+        config:
           clientID: <client_id>
           clientSecret: <client_secret>
-          orgs:
-          - name: <github_organization>
-          redirectURI: https://kubermatic.test/dex/callback
-        id: github
-        name: GitHub
-        type: github
-        userIDKey: jti
-        userNameKey: email
+          redirectURI: https://kkp.example.com/dex/callback
+          scopes:
+            - openid
+            - profile
+            - email
+            - offline_access
+          # Workaround to support multiple user_id/client_id pairs concurrently
+          userIDKey: jti
 ```
 
 #### external provider
diff --git a/content/kubermatic/v2.25/architecture/known-issues/_index.en.md b/content/kubermatic/v2.25/architecture/known-issues/_index.en.md
index 03a053c2d..b65fa98b2 100644
--- a/content/kubermatic/v2.25/architecture/known-issues/_index.en.md
+++ b/content/kubermatic/v2.25/architecture/known-issues/_index.en.md
@@ -173,17 +173,20 @@ The following yaml snippet is an example how to configure an oidc connector to k
 
 ```yaml
     connectors:
-      - config:
+      - id: oidc
+        name: OIDC
+        type: Google
+        config:
           clientID: <client_id>
           clientSecret: <client_secret>
-          orgs:
-          - name: <github_organization>
-          redirectURI: https://kubermatic.test/dex/callback
-        id: github
-        name: GitHub
-        type: github
-        userIDKey: jti
-        userNameKey: email
+          redirectURI: https://kkp.example.com/dex/callback
+          scopes:
+            - openid
+            - profile
+            - email
+            - offline_access
+          # Workaround to support multiple user_id/client_id pairs concurrently
+          userIDKey: jti
 ```
 
 #### external provider
diff --git a/content/kubermatic/v2.26/architecture/known-issues/_index.en.md b/content/kubermatic/v2.26/architecture/known-issues/_index.en.md
index b5b4a32f2..3dbf6e93e 100644
--- a/content/kubermatic/v2.26/architecture/known-issues/_index.en.md
+++ b/content/kubermatic/v2.26/architecture/known-issues/_index.en.md
@@ -32,17 +32,20 @@ The following yaml snippet is an example how to configure an oidc connector to k
 
 ```yaml
     connectors:
-      - config:
+      - id: oidc
+        name: OIDC
+        type: Google
+        config:
           clientID: <client_id>
           clientSecret: <client_secret>
-          orgs:
-          - name: <github_organization>
-          redirectURI: https://kubermatic.test/dex/callback
-        id: github
-        name: GitHub
-        type: github
-        userIDKey: jti
-        userNameKey: email
+          redirectURI: https://kkp.example.com/dex/callback
+          scopes:
+            - openid
+            - profile
+            - email
+            - offline_access
+          # Workaround to support multiple user_id/client_id pairs concurrently
+          userIDKey: jti
 ```
 
 #### external provider
diff --git a/content/kubermatic/v2.27/architecture/known-issues/_index.en.md b/content/kubermatic/v2.27/architecture/known-issues/_index.en.md
index b5b4a32f2..3dbf6e93e 100644
--- a/content/kubermatic/v2.27/architecture/known-issues/_index.en.md
+++ b/content/kubermatic/v2.27/architecture/known-issues/_index.en.md
@@ -32,17 +32,20 @@ The following yaml snippet is an example how to configure an oidc connector to k
 
 ```yaml
     connectors:
-      - config:
+      - id: oidc
+        name: OIDC
+        type: Google
+        config:
           clientID: <client_id>
           clientSecret: <client_secret>
-          orgs:
-          - name: <github_organization>
-          redirectURI: https://kubermatic.test/dex/callback
-        id: github
-        name: GitHub
-        type: github
-        userIDKey: jti
-        userNameKey: email
+          redirectURI: https://kkp.example.com/dex/callback
+          scopes:
+            - openid
+            - profile
+            - email
+            - offline_access
+          # Workaround to support multiple user_id/client_id pairs concurrently
+          userIDKey: jti
 ```
 
 #### external provider