tenant-a: no upstream deployed yet (see Story 1.14)