diff --git a/docs/pages/includes/role-spec.mdx b/docs/pages/includes/role-spec.mdx index 2ac34fad5fd79..ef780959cd30b 100644 --- a/docs/pages/includes/role-spec.mdx +++ b/docs/pages/includes/role-spec.mdx @@ -366,6 +366,14 @@ spec: kubernetes_resources: - kind: "namespace" + # 'reason' defines settings for the reason for the access provided by the user. + reason: + # 'mode' can be either "required" or "optional". Empty string is treated as + # "optional". If a role has the request reason mode set to "required", then reason + # is required for all Access Requests requesting roles or resources allowed by + # this role. It applies only to users who have this role assigned. + mode: "optional" + # thresholds specifies minimum amount of approvers and deniers, # defaults to 1 for both (enterprise-only) thresholds: diff --git a/rfd/0186-optionally-require-reason-for-access-request.md b/rfd/0186-optionally-require-reason-for-access-request.md index eeca95046737b..eff1f19cfd79a 100644 --- a/rfd/0186-optionally-require-reason-for-access-request.md +++ b/rfd/0186-optionally-require-reason-for-access-request.md @@ -1,9 +1,9 @@ --- authors: Pawel Kopiczko (pawel.kopiczko@goteleport.com) -state: draft +state: implemented --- -# RFD 186 - Optionally require reason for access request +# RFD 186 - Optionally require reason for Access Request ## Required Approvers