queryfrontend: grant jaeger-query access to pki certs (#1051)

* queryfrontend: grant jaeer-query access to pki certs

Signed-off-by: Benedikt Bongartz <bongartz@klimlive.de>

* Update .chloggen/fix_jaeger-query-certs.yaml

---------

Signed-off-by: Benedikt Bongartz <bongartz@klimlive.de>
Co-authored-by: Andreas Gerstmayr <andreas@gerstmayr.me>

.chloggen/fix_jaeger-query-certs.yaml

@@ -0,0 +1,16 @@
+# One of 'breaking', 'deprecation', 'new_component', 'enhancement', 'bug_fix'
+change_type: bug_fix
+
+# The name of the component, or a single word describing the area of concern, (e.g. tempostack, tempomonolithic, github action)
+component: tempostack
+
+# A brief description of the change. Surround your text with quotes ("") if it needs to start with a backtick (`).
+note: grant jaeer-query access to pki certs
+
+# One or more tracking issues related to the change
+issues: [1051]
+
+# (Optional) One or more lines of additional information to render under the primary note.
+# These lines will be padded with 2 spaces and then inserted directly into the document.
+# Use pipe (|) for multiline entries.
+subtext:

internal/manifests/queryfrontend/query_frontend.go

@@ -56,7 +56,7 @@ func BuildQueryFrontend(params manifestutils.Params) ([]client.Object, error) {
 
 	if gates.HTTPEncryption || gates.GRPCEncryption {
 		caBundleName := naming.SigningCABundleName(tempo.Name)
-		targets := []string{containerNameTempo, containerNameTempoQuery}
+		targets := []string{containerNameTempo, containerNameJaegerQuery, containerNameTempoQuery}
 		if err := manifestutils.ConfigureServiceCAByContainerName(&d.Spec.Template.Spec, caBundleName, targets...); err != nil {
 			return nil, err
 		}