Question on Thanos IRSA Support with Tencent COS

[dirkckau]

Thanos, Prometheus, and Golang Version:
Thanos v0.36.2

Object Storage Provider:
Tencent Cloud Object Storage (COS)

Description:
We have successfully configured Thanos in AWS EKS using IAM Roles for Service Accounts (IRSA) for S3 access, which requires no static secrets.

We are now attempting a similar setup in Tencent TKE with their COS storage. However, our configuration consistently fails, as Thanos requires the secret_key and secret_id to be explicitly provided.

Question:
Does the Thanos COS object storage backend officially support a native IRSA-like mechanism for Tencent TKE? If so, could you point us to the required configuration? Any guidance would be greatly appreciated.