add todo to setup-rbac, fix uwm retention unit

playbooks/roles/setup-rbac/tasks/main.yml

@@ -76,6 +76,7 @@
   loop: "{{ sp_crbs }}"
   # "{{ sp_crbs | difference(['self-provisioners']) }}"
 
+# TODO: this looks like it adds system:authenticated:oauth after every lab restart.
 - name: Ensure that the self-provisioners CRB lists only admin groups.
   kubernetes.core.k8s:
     kubeconfig: tmp/kubeconfig-ocp4

playbooks/roles/user-workload-monitoring/tasks/main.yml

@@ -47,7 +47,7 @@
             enableUserAlertmanagerConfig: true
           prometheusK8s:
             retention: 1w
-            retentionSize: 4G
+            retentionSize: 4GiB
             volumeClaimTemplate:
               spec:
                 storageClassName: nfs-storage
@@ -71,7 +71,7 @@
             enableAlertmanagerConfig: true
           prometheus:
             retention: 1w
-            retentionSize: 4G
+            retentionSize: 4GiB
             volumeClaimTemplate:
               spec:
                 storageClassName: nfs-storage