From fa4d97eede0cbae8390409a8d6482b0143e1583b Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Fri, 9 Jan 2026 18:53:49 +0900
Subject: [PATCH] REFACTOR(tempo): remove redundant ExternalSecret, use
 ClusterExternalSecret

- Remove tempo-s3-secret ExternalSecret (now using minio-s3-credentials from ClusterExternalSecret)
- Remove manifests source from ArgoCD application
---
 tempo/argocd.yaml           |  3 ---
 tempo/manifests/secret.yaml | 26 --------------------------
 2 files changed, 29 deletions(-)
 delete mode 100644 tempo/manifests/secret.yaml

diff --git a/tempo/argocd.yaml b/tempo/argocd.yaml
index f40b041..61bb11b 100644
--- a/tempo/argocd.yaml
+++ b/tempo/argocd.yaml
@@ -17,9 +17,6 @@ spec:
   - repoURL: https://github.com/K3S-HOME/observability.git
     targetRevision: main
     ref: values
-  - repoURL: https://github.com/K3S-HOME/observability.git
-    targetRevision: main
-    path: tempo/manifests
   destination:
     server: https://kubernetes.default.svc
     namespace: tempo
diff --git a/tempo/manifests/secret.yaml b/tempo/manifests/secret.yaml
deleted file mode 100644
index e9c8776..0000000
--- a/tempo/manifests/secret.yaml
+++ /dev/null
@@ -1,26 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: tempo-s3-secret
-  namespace: tempo
-spec:
-  refreshInterval: 1h
-  secretStoreRef:
-    name: vault-backend
-    kind: ClusterSecretStore
-  target:
-    name: tempo-s3-secret
-    template:
-      engineVersion: v2
-      data:
-        S3_ACCESS_KEY: "{{ .access_key }}"
-        S3_SECRET_KEY: "{{ .secret_key }}"
-  data:
-    - secretKey: access_key
-      remoteRef:
-        key: minio
-        property: ROOT_USER
-    - secretKey: secret_key
-      remoteRef:
-        key: minio
-        property: ROOT_PASSWORD