s3 management: add user management

- accounting now uses the command runner utility code

- s3 users are now managed (created, deleted and updated)

Re PL-133084

changelog.d/20241114_110006_PL-133084-s3-usermgmt_scriv.md

@@ -0,0 +1,18 @@
+<!--
+
+A new changelog entry.
+
+Delete placeholder items that do not apply. Empty sections will be removed
+automatically during release.
+
+Leave the XX.XX as is: this is a placeholder and will be automatically filled
+correctly during the release and helps when backporting over multiple platform
+branches.
+
+-->
+
+
+### NixOS XX.XX platform
+
+- S3 users are now managed automatically and can be viewed and managed via our
+  customer portal. (PL-133084)

nixos/roles/ceph/rgw.nix

@@ -173,13 +173,13 @@ in
         '';
       };
 
-      systemd.services.fc-ceph-rgw-accounting = rec {
-        description = "Upload S3 usage data to the Directory";
+      systemd.services.fc-ceph-rgw-users = rec {
+        description = "Sync S3 users and accounting with directory";
         path = [ cephPkgs.ceph ];
         serviceConfig.Type = "oneshot";
         wants = [ fclib.network.sto.addressUnit ];
         after = wants;
-        script = "${pkgs.fc.agent}/bin/fc-s3accounting --enc ${config.flyingcircus.encPath}";
+        script = "${pkgs.fc.agent}/bin/fc-s3users --enc ${config.flyingcircus.encPath}";
       };
 
       flyingcircus.services.sensu-client.checks = {
@@ -223,10 +223,10 @@ in
         };
       };
 
-      systemd.timers.fc-ceph-rgw-accounting = {
+      systemd.timers.fc-ceph-rgw-users = {
         enable = ! config.flyingcircus.services.ceph.server.passive;
 
-        description = "Timer for uploading S3 usage data to the Directory";
+        description = "Timer for syncing S3 users and accounting with the directory";
         wantedBy = [ "timers.target" ];
         timerConfig = {
           Persistent = true;

pkgs/fc/agent/default.nix

@@ -98,4 +98,10 @@ buildPythonPackage rec {
     checkInputs ++ [ py.pytest ] ++ propagatedBuildInputs
   );
 
+  outputs = [ "out" "qa" ];
+
+  postCheck = ''
+    cp -a htmlcov/ $qa/
+  '';
+
 }