diff --git a/tool/tsh/common/tsh.go b/tool/tsh/common/tsh.go index d5bed071ec1c9..b3d076fd16d35 100644 --- a/tool/tsh/common/tsh.go +++ b/tool/tsh/common/tsh.go @@ -4290,12 +4290,12 @@ func printLoginInformation(cf *CLIConf, profile *client.ProfileStatus, profiles if len(accessListsToReview) > 0 { fmt.Printf("Access lists that need to be reviewed:\n") for _, accessList := range accessListsToReview { - d := time.Until(accessList.Spec.Audit.NextAuditDate).Round(time.Minute) var msg string - if d > 0 { - msg = fmt.Sprintf("%v left to review", d.String()) + nextAuditDate := accessList.Spec.Audit.NextAuditDate.Format(time.DateOnly) + if time.Now().After(accessList.Spec.Audit.NextAuditDate) { + msg = fmt.Sprintf("review is overdue (%v)", nextAuditDate) } else { - msg = fmt.Sprintf("review was required %v ago", (-d).String()) + msg = fmt.Sprintf("review is required by %v", nextAuditDate) } fmt.Printf("\t%s (%v)\n", accessList.Spec.Title, msg) }