diff --git a/doc/source/_includes/oidc-service-parameters-migration.rest b/doc/source/_includes/oidc-service-parameters-migration.rest
new file mode 100644
index 000000000..e69de29bb
diff --git a/doc/source/security/kubernetes/configure-kubernetes-for-oidc-token-validation-after-bootstrapping-the-system.rst b/doc/source/security/kubernetes/configure-kubernetes-for-oidc-token-validation-after-bootstrapping-the-system.rst
index 463f4f660..5659866e8 100644
--- a/doc/source/security/kubernetes/configure-kubernetes-for-oidc-token-validation-after-bootstrapping-the-system.rst
+++ b/doc/source/security/kubernetes/configure-kubernetes-for-oidc-token-validation-after-bootstrapping-the-system.rst
@@ -68,6 +68,11 @@ you can do so at any time using service parameters.
             oidc_groups_claim. These are equivalent to: oidc-client-id, oidc-issuer-url,
             oidc-username-claim and oidc-groups-claim.
 
+    .. only:: partner
+
+        .. include:: /_includes/oidc-service-parameters-migration.rest
+
+
 #.  Apply the service parameters.
 
     .. code-block:: none
diff --git a/doc/source/security/kubernetes/configure-oidc-auth-applications.rst b/doc/source/security/kubernetes/configure-oidc-auth-applications.rst
index 25c62e146..e607c6160 100644
--- a/doc/source/security/kubernetes/configure-oidc-auth-applications.rst
+++ b/doc/source/security/kubernetes/configure-oidc-auth-applications.rst
@@ -357,10 +357,10 @@ Configure OIDC Auth Applications
 
     The overall Dex documentation is available on `dexidp.io
     <https://dexidp.io/docs/>`__.  The configuration of dex server version
-    v2.37.0 is described on github
-    (https://github.com/dexidp/dex/blob/v2.37.0/config.yaml.dist) with example
+    v2.40.0 is described on github
+    (https://github.com/dexidp/dex/blob/v2.40.0/config.yaml.dist) with example
     ``config.dev.yaml``
-    (https://github.com/dexidp/dex/blob/v2.37.0/config.dev.yaml).
+    (https://github.com/dexidp/dex/blob/v2.40.0/config.dev.yaml).
 
     The examples below configure a token expiry of ten hours, the |LDAP|
     connectors to the remote servers using HTTPS (LDAPS) using the servers |CA|
@@ -600,7 +600,7 @@ are:
     image:
       repository: ghcr.io/dexidp/dex
       pullPolicy: IfNotPresent
-      tag: v2.37.0
+      tag: v2.40.0
     imagePullSecrets:
       - name: default-registry-key
     env: