feat: Add AWS external_id support in sigv4 configuration for Prometheus/Alertmanager/Thanos CRD

[dongjiang1989]

Description

Describe the big picture of your changes here to communicate to the maintainers why we should accept this pull request.

ref: https://github.com/prometheus/prometheus/pull/17916/changes
Add AWS external_id support in sigv4 configuration for Prometheus/Alertmanager CRD.

If you're contributing for the first-time, check our contribution guidelines.

Type of change

What type of changes does your code introduce to the Prometheus operator? Put an x in the box that apply.

• CHANGE (fix or feature that would cause existing functionality to not work as expected)
• FEATURE (non-breaking change which adds functionality)
• BUGFIX (non-breaking change which fixes an issue)
• ENHANCEMENT (non-breaking change which improves existing functionality)
• NONE (if none of the other choices apply. Example, tooling, build system, CI, docs, etc.)

Verification

Please check the Prometheus-Operator testing guidelines for recommendations about automated tests.

Changelog entry

Please put a one-line changelog entry below. This will be copied to the changelog file during the release process.

Add AWS external_id support in sigv4 configuration for Prometheus/Alertmanager CRD.

[dongjiang1989]

cc @simonpasquier PTAL

[simonpasquier]

we need also to update the Thanos controller

prometheus-operator/pkg/thanos/operator.go

Lines 975 to 979 in 161c85f

	// Thanos does not support azureAD.workloadIdentity in any version
	if rw.AzureAD != nil && rw.AzureAD.WorkloadIdentity != nil {
	reset := resetFieldFn("none")
	reset("azureAD.workloadIdentity", &rw.AzureAD.WorkloadIdentity)
	}

[dongjiang1989]

we need also to update the Thanos controller

prometheus-operator/pkg/thanos/operator.go

Lines 975 to 979 in 161c85f

	// Thanos does not support azureAD.workloadIdentity in any version
	if rw.AzureAD != nil && rw.AzureAD.WorkloadIdentity != nil {
	reset := resetFieldFn("none")
	reset("azureAD.workloadIdentity", &rw.AzureAD.WorkloadIdentity)
	}

Add unittest case done.

[dongjiang1989]

Thanks @simonpasquier
Please re-check it

[simonpasquier]

AFAICT Thanos doesn't yet support the field so we need to drop before generating the config.

[dongjiang1989]

Remove it done.
Thanks @simonpasquier

[dongjiang1989]

Thanks @simonpasquier Updated.
Please re-check it