diff --git a/applications/tempo.yaml b/applications/tempo.yaml
index c794fa13..b71cf80d 100644
--- a/applications/tempo.yaml
+++ b/applications/tempo.yaml
@@ -22,15 +22,10 @@ spec:
       valueFiles:
         - $values/kustomizations/tempo/values.yaml
   project: aux
-  ignoreDifferences:
-  - group: apps
-    kind: StatefulSet
-    jsonPointers:
-    - /spec/persistentVolumeClaimRetentionPolicy
   syncPolicy:
-    managedNamespaceMetadata:
-      labels:
-        component: aux
+    # managedNamespaceMetadata:
+    #   labels:
+    #     component: aux
     syncOptions:
       - CreateNamespace=true
       - ApplyOutOfSyncOnly=true
diff --git a/kustomizations/tempo/values.yaml b/kustomizations/tempo/values.yaml
index e69de29b..8ba85f48 100644
--- a/kustomizations/tempo/values.yaml
+++ b/kustomizations/tempo/values.yaml
@@ -0,0 +1,32 @@
+tempo:
+  storage:
+  trace:
+    backend: s3
+    s3:
+      bucket: tempo-traces
+      endpoint: http://10.255.241.30:30080
+      access_key: ...                                 # optional. access key when using static credentials.
+      secret_key: ...                                 # optional. secret key when using static credentials.
+      insecure: true                                 # optional. enable if endpoint is http
+    backend: local
+    local:
+      path: /var/tempo/traces
+    wal:
+      path: /var/tempo/wal
+
+tempoQuery:
+  ingress:
+    enabled: true
+    ingressClassName: nginx
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-staging
+      nginx.ingress.kubernetes.io/ssl-redirect: "true"
+      atlantis.oceanbox.io/expose: internal
+    path: /
+    pathType: Prefix
+    hosts:
+      - query.tempo.adm.oceanbox.io
+    tls:
+     - secretName: tempo-query-tls
+       hosts:
+         - query.tempo.adm.oceanbox.io