Update role reference with reason.mode

gravitational · Nov 29, 2024 · e55582b · e55582b
1 parent 095b0a3
commit e55582b
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/docs/pages/includes/role-spec.mdx b/docs/pages/includes/role-spec.mdx
@@ -366,6 +366,14 @@ spec:
       kubernetes_resources:
         - kind: "namespace"
 
+      # 'reason' defines settings for the reason for the access provided by the user.
+      reason:
+        # 'mode' can be either "required" or "optional". Empty string is treated as
+        # "optional". If a role has the request reason mode set to "required", then reason
+        # is required for all Access Requests requesting roles or resources allowed by
+        # this role. It applies only to users who have this role assigned.
+        mode: "optional"
+
       # thresholds specifies minimum amount of approvers and deniers,
       # defaults to 1 for both (enterprise-only)
       thresholds:

diff --git a/rfd/0186-optionally-require-reason-for-access-request.md b/rfd/0186-optionally-require-reason-for-access-request.md
@@ -1,9 +1,9 @@
 ---
 authors: Pawel Kopiczko ([email protected])
-state: draft
+state: implemented
 ---
 
-# RFD 186 - Optionally require reason for access request
+# RFD 186 - Optionally require reason for Access Request
 
 
 ## Required Approvers