diff --git a/TODO b/TODO
index dfe6a931..0b8cfdb9 100644
--- a/TODO
+++ b/TODO
@@ -30,3 +30,4 @@ install 'monitoring-system' app
 reconcile system helm releases
 remove cluster and other namespace resources from apps charts, eg extension-apiserver-authentication-reader
 spawn etcd per tenant / per cluster
+add ownerReferences for tenants