Merge branch 'L2SS-2107-annotate-grafana-service-token' into 'main'

L2SS-2107: Describe how to (re)create the Grafana token for Garibaldi

Closes L2SS-2107

See merge request !17

infra/garibaldi-central.levant.nomad

@@ -8,7 +8,6 @@ job "daily-backup-grafana-to-s3" {
   }
 
   group "garibaldi" {
-
     vault {
       policies = ["default"]
     }
@@ -26,6 +25,11 @@ job "daily-backup-grafana-to-s3" {
         GRAFANA_URL = "https://monitoring.lofar.net:443"
       }
 
+      # Note: the Grafana service account token needs to be recreated if Grafana is redeployed:
+      #   1. Create an Admin service account at https://monitoring.lofar.net/org/serviceaccounts/
+      #   2. Create a service account token for that account
+      #   3. Upload the token to vault at https://vault.lofar.net/ui/vault/secrets/kv-v2/kv/grafana%2Fgaribaldi
+
       template {
         env = true
         destination = "secrets/file.env"