move tls pod override to role level

Author: labrenbe

stacks/logging/opensearch.yaml

@@ -17,15 +17,6 @@ spec:
         config:
           listenerClass: cluster-internal
         replicas: 1
-        podOverrides:
-          spec:
-            volumes:
-              - name: tls
-                ephemeral:
-                  volumeClaimTemplate:
-                    metadata:
-                      annotations:
-                        secrets.stackable.tech/scope: node,pod,service=opensearch,service=opensearch-nodes-default-headless
     configOverrides:
       opensearch.yml:
         # Disable memory mapping in this stack; If memory mapping were activated, the kernel setting
@@ -66,6 +57,7 @@ spec:
                 metadata:
                   annotations:
                     secrets.stackable.tech/class: tls
+                    secrets.stackable.tech/scope: node,pod,service=opensearch,service=opensearch-nodes-default-headless
                 spec:
                   storageClassName: secrets.stackable.tech
                   accessModes: