OSDOCS#12398: IDPs need workers for DNS resolution

Author: xenolinux

modules/hcp-configuring-oauth-console.adoc

@@ -24,7 +24,7 @@ Adding any identity provider in the OAuth configuration removes the default `kub
 
 [NOTE]
 ====
-When you configure identity providers, you must have at least one `NodePool` replica in your hosted cluster. However, the `htpasswd` and `request-header` identity providers do not need the `NodePool` replicas.
+When you configure identity providers, you must configure at least one `NodePool` replica in your hosted cluster in advance. Traffic for DNS resolution is sent through the worker nodes. You do not need to configure the `NodePool` replicas in advance for the `htpasswd` and `request-header` identity providers.
 ====
 
 .Prerequisites

modules/hcp-configuring-oauth.adoc

@@ -24,7 +24,7 @@ Adding any identity provider in the OAuth configuration removes the default `kub
 
 [NOTE]
 ====
-When you configure identity providers, you must have at least one `NodePool` replica in your hosted cluster. However, the `htpasswd` and `request-header` identity providers do not need the `NodePool` replicas.
+When you configure identity providers, you must configure at least one `NodePool` replica in your hosted cluster in advance. Traffic for DNS resolution is sent through the worker nodes. You do not need to configure the `NodePool` replicas in advance for the `htpasswd` and `request-header` identity providers.
 ====
 
 .Prerequisites