• Add a required field to Tempo CRs to indicate a non secure instance is going to be created (e.g. tenants.mode=insecure)
• Add oauth proxy for Tempo query frontend
• Show non secure instances in the UI

The most common question for the Tracing UI is: "Why is my Tempo instance not showing up?"

The reason why non-multitenancy instances are not supported is because they don't deploy a gateway, and therefore don't have any authentication/authorization.

To support these instances, we can add a RBAC check on the UI plugin backend (check if user has access to the namespace of the Tempo instance).