REFACTOR(tempo): remove redundant ExternalSecret, use ClusterExternalSecret

- Remove tempo-s3-secret ExternalSecret (now using minio-s3-credentials from ClusterExternalSecret)
- Remove manifests source from ArgoCD application

tempo/argocd.yaml

@@ -17,9 +17,6 @@ spec:
   - repoURL: https://github.com/K3S-HOME/observability.git
     targetRevision: main
     ref: values
-  - repoURL: https://github.com/K3S-HOME/observability.git
-    targetRevision: main
-    path: tempo/manifests
   destination:
     server: https://kubernetes.default.svc
     namespace: tempo

tempo/manifests/secret.yaml

@@ -1,26 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: tempo-s3-secret
-  namespace: tempo
-spec:
-  refreshInterval: 1h
-  secretStoreRef:
-    name: vault-backend
-    kind: ClusterSecretStore
-  target:
-    name: tempo-s3-secret
-    template:
-      engineVersion: v2
-      data:
-        S3_ACCESS_KEY: "{{ .access_key }}"
-        S3_SECRET_KEY: "{{ .secret_key }}"
-  data:
-    - secretKey: access_key
-      remoteRef:
-        key: minio
-        property: ROOT_USER
-    - secretKey: secret_key
-      remoteRef:
-        key: minio
-        property: ROOT_PASSWORD