limes: add notes to remove obsolete role assignments from allowlist

sapcc · Sep 16, 2024 · 2180256 · 2180256
1 parent 3b2291a
commit 2180256
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/openstack/limes/templates/prometheus-alerts.yaml b/openstack/limes/templates/prometheus-alerts.yaml
@@ -59,8 +59,8 @@ spec:
         # - group CCADMIN_CLOUD_ADMINS@ccadmin in project cloud_admin@ccadmin
         # - user dashboard@Default             in project cloud_admin@ccadmin (TODO: remove once the seed changes were deployed)
         # - user kubernikus-terraform@Default  in project cloud_admin@ccadmin (TODO: remove once the seed changes were deployed)
-        # - user TCC_BM_ANSL@ccadmin           in project cloud_admin@ccadmin
-        # - user TCC_BM_TMPR@ccadmin           in project cloud_admin@ccadmin
+        # - user TCC_BM_ANSL@ccadmin           in project cloud_admin@ccadmin (TODO: remove once Bernd Kuespert has removed this assignment from his seeds)
+        # - user TCC_BM_TMPR@ccadmin           in project cloud_admin@ccadmin (TODO: remove once Bernd Kuespert has removed this assignment from his seeds)
         - alert: OpenstackLimesUnexpectedCloudAdminRoleAssignments
           expr: max(openstack_assignments_per_role{role_name="cloud_resource_admin"}) > 5
           for: 10m