next try

apps/monitoring/kustomization.yaml

@@ -11,6 +11,7 @@ resources:
   # prometheus-operator crds
   - https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.70.0/bundle.yaml
   - prometheus.yaml
+  - thanos-objstore-config.sealedsecret.yaml
 
 
 helmCharts:

apps/monitoring/prometheus.yaml

@@ -56,9 +56,9 @@ spec:
   thanos:
     version: v0.11.2
     objectStorageConfig:
-      type: local
-      config:
-        directory: /prometheus-data
+      # loads the config from a secret named thanos-objstore-config in the same namespace
+      key: thanos.yaml
+      name: thanos-objstore-config
 
 ---
 apiVersion: v1

apps/monitoring/thanos-objstore-config.sealedsecret.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: thanos-objstore-config
+  namespace: monitoring
+spec:
+  encryptedData:
+    thanos.yaml: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: thanos-objstore-config
+      namespace: monitoring
+    type: Opaque