OperatorUser crd (#2866)

* OperatorUser crd

* prefix crd name with 'mirrord'

* Improve field doc

* Update

* Small crd update

* operator setup fix

* Better target display

* Changelog entry

* Removed unnecessary method on KubeTarget

changelog.d/+operator-user-crd.internal.md

@@ -0,0 +1 @@
+Added CRD for `MirrordOperatorUser`, adjusted operator setup.

mirrord/operator/src/crd.rs

@@ -3,6 +3,7 @@ use std::{
     fmt::{Display, Formatter},
 };
 
+use chrono::{DateTime, Utc};
 use kube::{CustomResource, Resource};
 use kube_target::{KubeTarget, UnknownTargetType};
 pub use mirrord_config::feature::split_queues::QueueId;
@@ -659,3 +660,31 @@ pub struct MirrordSqsSessionSpec {
     // so we save that field as a (HEX) string even though its source is a u64
     pub session_id: String,
 }
+
+/// Describes an operator user.
+#[derive(CustomResource, Clone, Debug, Deserialize, Serialize, JsonSchema)]
+#[kube(
+    group = "operator.metalbear.co",
+    version = "v1",
+    kind = "MirrordOperatorUser",
+    root = "MirrordOperatorUser"
+)]
+#[serde(rename_all = "camelCase")]
+pub struct MirrordOperatorUserSpec {
+    /// Unique ID.
+    pub user_id: String,
+    /// Last seen local username.
+    pub last_username: String,
+    /// Last seen hostname.
+    pub last_hostname: String,
+    /// Last seen Kubernetes username.
+    pub last_k8s_username: String,
+    /// Most recent session activity.
+    pub last_seen: DateTime<Utc>,
+    /// Total session count.
+    pub total_sessions_count: u64,
+    /// Total session duration.
+    pub total_sessions_duration_seconds: u64,
+    /// Last session's target.
+    pub last_target: String,
+}

mirrord/operator/src/setup.rs

@@ -28,7 +28,7 @@ use thiserror::Error;
 
 use crate::crd::{
     kafka::{MirrordKafkaClientConfig, MirrordKafkaEphemeralTopic, MirrordKafkaTopicsConsumer},
-    MirrordPolicy, MirrordSqsSession, MirrordWorkloadQueueRegistry, TargetCrd,
+    MirrordOperatorUser, MirrordPolicy, MirrordSqsSession, MirrordWorkloadQueueRegistry, TargetCrd,
 };
 
 pub static OPERATOR_NAME: &str = "mirrord-operator";
@@ -787,6 +787,7 @@ impl OperatorClusterUserRole {
                         "mirrordoperators".to_owned(),
                         "targets".to_owned(),
                         "targets/port-locks".to_owned(),
+                        MirrordOperatorUser::plural(&()).into_owned(),
                     ]),
                     verbs: vec!["get".to_owned(), "list".to_owned()],
                     ..Default::default()