The note is not visible to the blocked user.
I wonder if we can replace this with structs from k8s-openapi or kube-rs
as noted in a comment below, should remove TenantManager later