Deploy thanos-store in customersdot environments

In https://gitlab.com/gitlab-com/gl-infra/infrastructure/-/issues/14621 we are setting up monitoring for the customersdot environments. As part of this effort, we need to deploy thanos-store in the customers GKE clusters. This will be done using tanka-deployments.

(items in red are missing)

src: Untitled_Diagram.drawio

MRs

stgsub:

• deploy thanos-store: gitlab-com/gl-infra/k8s-workloads/tanka-deployments!309 (merged)
• permissions for traces: https://ops.gitlab.net/gitlab-com/gl-infra/config-mgmt/-/merge_requests/3442
• lower prom resources: gitlab-com/gl-infra/k8s-workloads/gitlab-helmfiles!562 (merged)
• lower thanos resources: gitlab-com/gl-infra/k8s-workloads/tanka-deployments!310 (merged)
• enable Workload Identity on Thanos service account: https://ops.gitlab.net/gitlab-com/gl-infra/config-mgmt/-/merge_requests/3449

prdsub:

• deploy thanos-store: gitlab-com/gl-infra/k8s-workloads/tanka-deployments!315 (merged)
• permissions for traces: https://ops.gitlab.net/gitlab-com/gl-infra/config-mgmt/-/merge_requests/3462
• lower prom resources: gitlab-com/gl-infra/k8s-workloads/gitlab-helmfiles!566 (merged)
• lower thanos resources: covered in: gitlab-com/gl-infra/k8s-workloads/tanka-deployments!315 (merged)
• enable Workload Identity on Thanos service account: https://ops.gitlab.net/gitlab-com/gl-infra/config-mgmt/-/merge_requests/3463