Extending Just-In-Time Access when near expiry

What would you like Teleport to do?

Notify engineers in escalated permissions that their cert is about to expire, allowing them to +1 their current permissions.

Example:

SRE needs access into production to investigate a performance issue.
SRE initiates RBAC request, is approved, and can now access the environment.
SRE is then notified their access token is valid for [predefined]-hours.
Towards the end of that session, if it's still active, they're notified it's about to expire.
If they want to re-up that access request, Teleport could provide:
1. A means for continuing the session, like 1 "free life/continue," and the SRE can get an additional window auto-approved.
2. It could go back to the on-call to re-auth.

Customizable by the Teleport admins.

What problem does this solve?

Engineers in escalated permissions who need to work spend more time on a problem than initially planned.

gravitational / teleport