{"msg":"cockroach temporary directory: /var/tmp/omicron_tmp/.tmpAKdd0k","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:08.460907598Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"cockroach: copying from seed tarball (/var/tmp/omicron_tmp/crdb-base-build/0ba558b6703680b8ede35fabd6978a943490bd8054f72957a6e548a757ea0cf2.tar) to storage directory (/var/tmp/omicron_tmp/.tmpAKdd0k/data)","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:08.460975992Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"cockroach command line: cockroach start-single-node --insecure --http-addr=:0 --store=path=/var/tmp/omicron_tmp/.tmpAKdd0k/data,ballast-size=0 --listen-addr [::1]:0 --listening-url-file /var/tmp/omicron_tmp/.tmpAKdd0k/listen-url","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:08.473563418Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"cockroach environment: BUILDOMAT_JOB_ID=01HPMN2STWTAWNNTNSRX3P7732 BUILDOMAT_TASK_ID=4 CARGO=/home/build/.rustup/toolchains/1.74.1-x86_64-unknown-linux-gnu/bin/cargo CARGO_HOME=/home/build/.cargo CARGO_INCREMENTAL=0 CARGO_MANIFEST_DIR=/work/oxidecomputer/omicron/nexus/db-queries CARGO_PKG_AUTHORS= CARGO_PKG_DESCRIPTION= CARGO_PKG_HOMEPAGE= CARGO_PKG_LICENSE=MPL-2.0 CARGO_PKG_LICENSE_FILE= CARGO_PKG_NAME=nexus-db-queries CARGO_PKG_REPOSITORY= CARGO_PKG_RUST_VERSION= CARGO_PKG_VERSION=0.1.0 CARGO_PKG_VERSION_MAJOR=0 CARGO_PKG_VERSION_MINOR=1 CARGO_PKG_VERSION_PATCH=0 CARGO_PKG_VERSION_PRE= CI=true CRDB_SEED_TAR=/var/tmp/omicron_tmp/crdb-base-build/0ba558b6703680b8ede35fabd6978a943490bd8054f72957a6e548a757ea0cf2.tar GITHUB_BRANCH=order-next-item-subquery GITHUB_REF=refs/heads/order-next-item-subquery GITHUB_REPOSITORY=oxidecomputer/omicron GITHUB_SHA=604b19b55a25857d0a501c266b1b25941fa11b3e GOTRACEBACK=crash HOME=/home/build LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8 LD_LIBRARY_PATH=/work/oxidecomputer/omicron/target/debug/build/blake3-feeaa7149c3596f1/out:/work/oxidecomputer/omicron/target/debug/build/bzip2-sys-a48f149f01e13be4/out/lib:/work/oxidecomputer/omicron/target/debug/build/ring-36a1c9477f8b2f8d/out:/work/oxidecomputer/omicron/target/debug/build/ring-ba6b6ec6a6f9aa54/out:/work/oxidecomputer/omicron/target/debug/build/tofino-d74860998be2bf98/out:/work/oxidecomputer/omicron/target/debug/deps:/work/oxidecomputer/omicron/target/debug:/home/build/.rustup/toolchains/1.74.1-x86_64-unknown-linux-gnu/lib LOGNAME=build NEXTEST=1 NEXTEST_EXECUTION_MODE=process-per-test NEXTEST_LD_LIBRARY_PATH=/work/oxidecomputer/omicron/target/debug/build/blake3-feeaa7149c3596f1/out:/work/oxidecomputer/omicron/target/debug/build/bzip2-sys-a48f149f01e13be4/out/lib:/work/oxidecomputer/omicron/target/debug/build/ring-36a1c9477f8b2f8d/out:/work/oxidecomputer/omicron/target/debug/build/ring-ba6b6ec6a6f9aa54/out:/work/oxidecomputer/omicron/target/debug/build/tofino-d74860998be2bf98/out:/work/oxidecomputer/omicron/target/debug/deps:/work/oxidecomputer/omicron/target/debug:/home/build/.rustup/toolchains/1.74.1-x86_64-unknown-linux-gnu/lib NEXTEST_RUN_ID=3d3fc513-6fdb-4fb5-9570-45efa6c0d5c6 OUT_DIR=/work/oxidecomputer/omicron/target/debug/build/nexus-db-queries-fe99d87e837cdda9/out PATH=/work/oxidecomputer/omicron/out/mgd/root/opt/oxide/mgd/bin:/work/oxidecomputer/omicron/out/dendrite-stub/bin:/work/oxidecomputer/omicron/out/clickhouse:/work/oxidecomputer/omicron/out/cockroachdb/bin:/home/build/.cargo/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/ooce/bin:/opt/ooce/sbin PWD=/work/oxidecomputer/omicron RUSTC_BOOTSTRAP=1 RUSTDOCFLAGS=-D warnings RUSTFLAGS=-D warnings RUSTUP_HOME=/home/build/.rustup RUSTUP_TOOLCHAIN=1.74.1-x86_64-unknown-linux-gnu RUST_BACKTRACE=1 RUST_RECURSION_COUNT=1 SHLVL=1 SSL_CERT_DIR=/usr/lib/ssl/certs SSL_CERT_FILE=/usr/lib/ssl/certs/ca-certificates.crt TMPDIR=/var/tmp/omicron_tmp TZ=UTC USER=build __NEXTEST_ATTEMPT=1 __NEXTEST_ORIGINAL_CARGO_MANIFEST_DIR=/work/oxidecomputer/omicron/nexus/db-queries","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:08.473718256Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"cockroach pid: 22491","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:09.530226444Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"cockroach listen URL: postgresql://root@[::1]:32963/omicron?sslmode=disable","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:09.530298538Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"database connection pool","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:09.53033839Z","hostname":"ip-10-150-1-168","pid":22474,"component":"db::Pool","database_url":"postgresql://root@[::1]:32963/omicron?sslmode=disable"} {"msg":"Compatible database schema: 33.0.1","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354389168Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354647611Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Action"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354691244Z","hostname":"ip-10-150-1-168","pid":22474,"class":"AnyActor"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354718435Z","hostname":"ip-10-150-1-168","pid":22474,"class":"AuthenticatedActor"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354741587Z","hostname":"ip-10-150-1-168","pid":22474,"class":"BlueprintConfig"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354762068Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Database"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354794659Z","hostname":"ip-10-150-1-168","pid":22474,"class":"DnsConfig"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354830671Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Fleet"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354866633Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Inventory"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354902165Z","hostname":"ip-10-150-1-168","pid":22474,"class":"IpPoolList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354928237Z","hostname":"ip-10-150-1-168","pid":22474,"class":"ConsoleSessionList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.354949208Z","hostname":"ip-10-150-1-168","pid":22474,"class":"DeviceAuthRequestList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.35498511Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloCertificateList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355007461Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloIdentityProviderList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355027552Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloUserList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355047383Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Project"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355072364Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Disk"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355109166Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Snapshot"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355162879Z","hostname":"ip-10-150-1-168","pid":22474,"class":"ProjectImage"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355236033Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Instance"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355302047Z","hostname":"ip-10-150-1-168","pid":22474,"class":"IpPool"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355349349Z","hostname":"ip-10-150-1-168","pid":22474,"class":"InstanceNetworkInterface"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355373061Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Vpc"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355392962Z","hostname":"ip-10-150-1-168","pid":22474,"class":"VpcRouter"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.355440494Z","hostname":"ip-10-150-1-168","pid":22474,"class":"RouterRoute"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.356960816Z","hostname":"ip-10-150-1-168","pid":22474,"class":"VpcSubnet"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.356999488Z","hostname":"ip-10-150-1-168","pid":22474,"class":"FloatingIp"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.3570414Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Image"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357085543Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloImage"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357123115Z","hostname":"ip-10-150-1-168","pid":22474,"class":"AddressLot"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357153036Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Blueprint"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357175547Z","hostname":"ip-10-150-1-168","pid":22474,"class":"LoopbackAddress"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357197709Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Certificate"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357232581Z","hostname":"ip-10-150-1-168","pid":22474,"class":"ConsoleSession"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357269413Z","hostname":"ip-10-150-1-168","pid":22474,"class":"DeviceAuthRequest"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357299744Z","hostname":"ip-10-150-1-168","pid":22474,"class":"DeviceAccessToken"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357322466Z","hostname":"ip-10-150-1-168","pid":22474,"class":"PhysicalDisk"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357376758Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Rack"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.35741306Z","hostname":"ip-10-150-1-168","pid":22474,"class":"RoleBuiltin"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357472114Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SshKey"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357528106Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Silo"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357558588Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloUser"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.35758116Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloGroup"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357652253Z","hostname":"ip-10-150-1-168","pid":22474,"class":"IdentityProvider"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.35777351Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SamlIdentityProvider"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.357859154Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Sled"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.358987255Z","hostname":"ip-10-150-1-168","pid":22474,"class":"TufRepo"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.359017297Z","hostname":"ip-10-150-1-168","pid":22474,"class":"TufArtifact"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.359038558Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Zpool"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.359058389Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Service"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.35907823Z","hostname":"ip-10-150-1-168","pid":22474,"class":"UserBuiltin"} {"msg":"full Oso configuration","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.359096811Z","hostname":"ip-10-150-1-168","pid":22474,"config":"#\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system. All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n actor.authenticated and\n has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - \"create_child\": required to create child resources (of any type)\n#\n# - \"list_children\": required to list child resources (of all types) of a\n# resource\n#\n# - \"modify\": required to modify or delete a resource\n#\n# - \"read\": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project. The specific roles\n# are oriented around intended use-cases:\n#\n# - \"admin\": has all permissions on the resource\n#\n# - \"collaborator\": has \"read\", \"list_children\", and \"create_child\", plus\n# the \"admin\" role for child resources. The idea is that if you're an\n# Organization Collaborator, you have full control over the Projects within\n# the Organization, but you cannot modify or delete the Organization itself.\n#\n# - \"viewer\": has \"read\" and \"list_children\" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level. For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin (superuser for the whole system)\n# - fleet.collaborator (can manage Silos)\n# - fleet.viewer (can read most non-siloed resources in the system)\n# - silo.admin (superuser for the silo)\n# - silo.collaborator (can create and own Organizations)\n# - silo.viewer (can read most resources within the Silo)\n# - organization.admin (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer (can read most resources within the Organization)\n# - project.admin (complete control over a Project)\n# - project.collaborator (can manage all resources within the Project)\n# - project.viewer (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below). We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# \"Fleet\" is a global singleton representing the whole system. The name comes\n# from the idea described in RFD 24, but it's not quite right. This probably\n# should be more like \"Region\" or \"AvailabilityZone\". The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"read\",\n\t \"create_child\",\n\t];\n\n\troles = [\n\t # Roles that can be attached by users\n\t \"admin\",\n\t \"collaborator\",\n\t \"viewer\",\n\n\t # Internal-only roles\n\t \"external-authenticator\"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"read\",\n\t \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Permissions implied by roles on this resource's parent (Fleet). Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo. To achieve this, we use permission rules here. (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"collaborator\" on \"parent_fleet\";\n\n\t# external authenticator has to create silo users\n\t\"list_children\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo. That's\n# not quite the same as having the \"viewer\" role. For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using \"POST /organizations\", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404. This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"read\",\n\t \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t\"admin\" if \"collaborator\" on \"parent_silo\";\n\t\"viewer\" if \"viewer\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro. Some resources require custom Polar code. Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"read\",\n\t \"create_child\",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users. This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"read\" on \"parent_fleet\";\n\t\"read\" if \"read\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n if silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"read\",\n\t \"create_child\",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { silo_user: SiloUser };\n\n\t\"read\" if \"read\" on \"silo_user\";\n\t\"modify\" if \"modify\" on \"silo_user\";\n}\nhas_relation(user: SiloUser, \"silo_user\", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t \"read\",\n\t \"modify\",\n\t \"create_child\",\n\t \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t \"read\",\n\t \"modify\",\n\t \"create_child\",\n\t \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database. These are used either at the top level\n# of the API path (e.g., \"/v1/system/ip-pools\") or as an implementation detail of the system\n# (in the case of console sessions and \"Database\"). The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet. None of these resources defines their own roles.\n#\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t# \"external-authenticator\" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos. These\n\t# operations necessarily need to read and modify DNS configuration.\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"modify\" if \"external-authenticator\" on \"parent_fleet\";\n\t# \"admin\" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t \"list_children\", # list blueprints\n\t \"create_child\", # create blueprint\n\t \"read\", # read the current target\n\t \"modify\", # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/ip-pools\" in the API\nresource IpPoolList {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list IP Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, \"create_child\", ip_pool: IpPool)\n\tif silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration. This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on. This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission. For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's users. This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on. This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission. For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions. This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif has_role(actor, \"external-authenticator\", silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with. Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(_actor: AuthenticatedActor, \"read\", _device_auth: DeviceAuthRequest);\nhas_permission(_actor: AuthenticatedActor, \"modify\", _device_auth: DeviceAuthRequest);\n\nhas_permission(actor: AuthenticatedActor, \"read\", device_token: DeviceAccessToken)\n\tif has_role(actor, \"external-authenticator\", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", identity_provider: IdentityProvider)\n\tif has_role(actor, \"external-authenticator\", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, \"external-authenticator\", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t # \"query\" is required to perform any query against the database,\n\t # whether a read or write query. This is checked when an operation\n\t # checks out a database connection from the connection pool.\n\t #\n\t # Any authenticated user gets this permission. There's generally\n\t # some other authz check involved in the database query. For\n\t # example, if you're querying the database to \"read\" a \"Project\", we\n\t # should also be checking that. So why do we do this at all? It's\n\t # a belt-and-suspenders measure so that if we somehow introduced an\n\t # unauthenticated code path that hits the database, it cannot be\n\t # used to DoS the database because we won't allow the operation to\n\t # make the query. (As long as the code path _is_ authenticated, we\n\t # can use throttling mechanisms to prevent DoS.)\n\t \"query\",\n\n\t # \"modify\" is required to populate database data that's delivered\n\t # with the system. It should also be required for schema changes,\n\t # when we support those. This is separate from \"query\" so that we\n\t # cannot accidentally invoke these code paths from API calls and\n\t # other general functions.\n\t \"modify\"\n\t];\n}\n\n# All authenticated users have the \"query\" permission on the database.\nhas_permission(_actor: AuthenticatedActor, \"query\", _resource: Database);\n\n# The \"db-init\" user is the only one with the \"modify\" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"modify\", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"create_child\", _resource: IpPoolList);\n# It also has \"admin\" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, \"admin\", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, \"admin\", _silo: Silo);\n\n\n\n resource Disk {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: Disk)\n if child.project = parent;\n \n\n resource Snapshot {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: Snapshot)\n if child.project = parent;\n \n\n resource ProjectImage {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: ProjectImage)\n if child.project = parent;\n \n\n resource Instance {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: Instance)\n if child.project = parent;\n \n\n resource IpPool {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: IpPool)\n if child.fleet = fleet;\n \n\n resource InstanceNetworkInterface {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = {\n containing_project: Project,\n parent: Instance\n };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(project: Project, \"containing_project\", child: InstanceNetworkInterface)\n if has_relation(project, \"containing_project\", child.instance);\n\n has_relation(parent: Instance, \"parent\", child: InstanceNetworkInterface)\n if child.instance = parent;\n \n\n resource Vpc {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: Vpc)\n if child.project = parent;\n \n\n resource VpcRouter {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = {\n containing_project: Project,\n parent: Vpc\n };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(project: Project, \"containing_project\", child: VpcRouter)\n if has_relation(project, \"containing_project\", child.vpc);\n\n has_relation(parent: Vpc, \"parent\", child: VpcRouter)\n if child.vpc = parent;\n \n\n resource RouterRoute {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = {\n containing_project: Project,\n parent: VpcRouter\n };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(project: Project, \"containing_project\", child: RouterRoute)\n if has_relation(project, \"containing_project\", child.vpc_router);\n\n has_relation(parent: VpcRouter, \"parent\", child: RouterRoute)\n if child.vpc_router = parent;\n \n\n resource VpcSubnet {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = {\n containing_project: Project,\n parent: Vpc\n };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(project: Project, \"containing_project\", child: VpcSubnet)\n if has_relation(project, \"containing_project\", child.vpc);\n\n has_relation(parent: Vpc, \"parent\", child: VpcSubnet)\n if child.vpc = parent;\n \n\n resource FloatingIp {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: FloatingIp)\n if child.project = parent;\n \n\n resource Image {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_silo: Silo };\n \"list_children\" if \"viewer\" on \"containing_silo\";\n \"read\" if \"viewer\" on \"containing_silo\";\n \"modify\" if \"collaborator\" on \"containing_silo\";\n \"create_child\" if \"collaborator\" on \"containing_silo\";\n }\n\n has_relation(parent: Silo, \"containing_silo\", child: Image)\n if child.silo = parent;\n \n\n resource SiloImage {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_silo: Silo };\n \"list_children\" if \"viewer\" on \"containing_silo\";\n \"read\" if \"viewer\" on \"containing_silo\";\n \"modify\" if \"collaborator\" on \"containing_silo\";\n \"create_child\" if \"collaborator\" on \"containing_silo\";\n }\n\n has_relation(parent: Silo, \"containing_silo\", child: SiloImage)\n if child.silo = parent;\n \n\n resource AddressLot {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: AddressLot)\n if child.fleet = fleet;\n \n\n resource Blueprint {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: Blueprint)\n if child.fleet = fleet;\n \n\n resource LoopbackAddress {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: LoopbackAddress)\n if child.fleet = fleet;\n \n\n\n resource ConsoleSession {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: ConsoleSession)\n if child.fleet = fleet;\n \n\n resource DeviceAuthRequest {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAuthRequest)\n if child.fleet = fleet;\n \n\n resource DeviceAccessToken {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAccessToken)\n if child.fleet = fleet;\n \n\n resource PhysicalDisk {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: PhysicalDisk)\n if child.fleet = fleet;\n \n\n resource Rack {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: Rack)\n if child.fleet = fleet;\n \n\n resource RoleBuiltin {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: RoleBuiltin)\n if child.fleet = fleet;\n \n\n\n\n\n\n\n\n resource Sled {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: Sled)\n if child.fleet = fleet;\n \n\n resource TufRepo {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: TufRepo)\n if child.fleet = fleet;\n \n\n resource TufArtifact {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: TufArtifact)\n if child.fleet = fleet;\n \n\n resource Zpool {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: Zpool)\n if child.fleet = fleet;\n \n\n resource Service {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: Service)\n if child.fleet = fleet;\n \n\n resource UserBuiltin {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: UserBuiltin)\n if child.fleet = fleet;\n "} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.367057229Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.367132873Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.368519777Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"attempting to create built-in users","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.369141981Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.369177443Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.369201764Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.369221465Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"created 5 built-in users","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.4104414Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.410524674Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.410567316Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.412240566Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"attempting to create built-in roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.412480299Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.412545993Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.412598306Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.412649728Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"created 10 built-in roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.438484807Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.43854227Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.438581942Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.440351557Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"attempting to create built-in role assignments","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.440623792Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.440661044Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.440687095Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.440791301Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"created 4 built-in role assignments","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.471703431Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.471796726Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.471840888Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.473525819Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"attempting to create built-in silos","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.47447852Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.474522252Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.474560525Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.474606917Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"created 2 built-in silos","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.528763907Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.528844132Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.528889884Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.529301016Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.544650151Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.544735465Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.546481209Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"attempting to create built-in projects","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.54685915Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.546907162Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.546950354Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.546995147Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.548765112Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.548841576Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.548880028Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.54892191Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.549356333Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.550883355Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.550926988Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.550955379Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.551400253Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.552159254Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.554447997Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.554524971Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.554582774Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.556391712Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.556435124Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.556476886Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.556506848Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.556534879Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.55655584Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.556574341Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.556929151Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.559198583Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.559247476Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.559305289Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.559756363Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"created built-in services project","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.595598988Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.595666052Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.595707054Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.597211605Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"attempting to create built-in VPCs","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.597689671Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.597725633Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.597751084Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.597770995Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.621909922Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.621996137Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.622458352Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.6233553Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.623434514Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.623467996Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.623498868Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.62447016Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.62466789Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.624703552Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.624733144Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.625046681Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.625860844Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.626218323Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.626248285Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.626270646Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.626972704Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.630633401Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"successful lookup of siloed resource \"Project\" using built-in user","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.630695794Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.630815741Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.630877204Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.630911576Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.630935947Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.631206922Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.634826506Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.634882759Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.634931431Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.635292741Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.636149877Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.636502676Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.636538798Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.636602672Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.637345732Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.641925888Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.641985791Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.642069196Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.642376262Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.6777041Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.677783105Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.678490163Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.701427805Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.701566922Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.701628166Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.701673418Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.702121412Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.703148237Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.703216481Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.703249453Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.70358Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.70450029Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.704995846Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.705028858Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.705050479Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.705879274Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.710480101Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.710556515Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.710607058Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.710923885Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.717283947Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.717389182Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.717446836Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.717492748Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.717812225Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.718920025Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.719328407Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.719395201Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.719499776Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.720418965Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.721215228Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.721260461Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.721307013Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.727604622Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.73371559Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.733802214Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.733845717Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.734299421Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"attempting to create built-in VPC firewall rules","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.789782412Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.789862356Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.789901669Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.790428327Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.80593132Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.806020685Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.806064937Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.808761082Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.808817825Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.809242868Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.810240402Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.810365918Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.810437732Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.810495045Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.810831753Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.811731242Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.811772274Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.811806476Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.812126023Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.813149878Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.81319691Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.813225612Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.81356354Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.814452168Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.81933036Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"successful lookup of siloed resource \"Vpc\" using built-in user","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.819387093Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.819412644Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Read","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.819438166Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.819481358Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.81951246Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.819855478Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.820917555Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.820986049Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.821027071Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.821481055Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.822435177Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.822564824Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.822650088Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.823068771Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.837463754Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.843201283Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Read","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.84333092Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.843448946Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.844028497Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.876631979Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.876725204Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.876778157Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.876819849Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.877745469Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.878910401Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.878963594Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.879004326Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.879470062Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.880399072Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.880450824Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.880500227Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.880918019Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.883516929Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.888880807Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.888985333Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.889037476Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.889704561Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"created built-in VPC firewall rules","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:10.9263487Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"attempting to create built-in VPC Subnets","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.926435075Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.926480097Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.926510679Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.926950323Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.955021221Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.955090915Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.955590482Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.956581765Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.957091842Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.957242301Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.958228683Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.959067279Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.959121451Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.959164124Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.959195765Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.959849581Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.959929025Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.960907307Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.96096395Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.961113468Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.961157341Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.961197323Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.96151866Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.9721242Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.977293447Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"successful lookup of siloed resource \"Vpc\" using built-in user","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.977398533Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:10.977444046Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.977471817Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:10.977934642Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.001470257Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.001727651Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.001793754Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.001850247Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.00450536Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.005589328Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.005784418Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.005837011Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.006230013Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.007189474Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.007801097Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.00785422Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.007895692Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.008684504Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.012737142Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.022180499Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.022269064Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.022776941Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.023736153Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.024313844Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.024367727Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.024409769Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.024439441Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.039611516Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.039689791Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.039738043Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.040745147Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.042141812Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.042648389Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.042695382Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.04284838Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.043803431Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.048305033Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.061264959Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.061336833Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.061382576Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.069127652Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.069274369Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.06945751Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.069527293Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.070162707Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.075488674Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.075565378Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.075635702Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.07615428Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.078459704Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.078826363Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.078887206Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.079107749Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.080297102Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.085450639Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"created built-in services vpc subnets","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.094276103Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"created built-in services vpc","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.094355217Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.0943984Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.094439472Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.09867731Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"attempting to create silo users","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.098750193Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.098800246Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.098831808Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.099468072Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"created 2 silo users","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.117640249Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"attempting to create silo user role assignments","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.117779396Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.11783853Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.117891022Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.11859363Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"created 2 silo user role assignments","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.132615853Z","hostname":"ip-10-150-1-168","pid":22474} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.132692267Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.132755061Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.133402015Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.140764601Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.140828794Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.141400275Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.157798307Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.157976776Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.158031649Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.158085452Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.158589159Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.159707889Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.161044591Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.161124595Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.161168368Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.16158544Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.179037138Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.179123382Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.179178115Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.179222548Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.179795458Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.183447614Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.185104543Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.185316155Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.185371208Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.18578325Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.258812644Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Action"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.258869547Z","hostname":"ip-10-150-1-168","pid":22474,"class":"AnyActor"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.258900579Z","hostname":"ip-10-150-1-168","pid":22474,"class":"AuthenticatedActor"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.25892905Z","hostname":"ip-10-150-1-168","pid":22474,"class":"BlueprintConfig"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.258957432Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Database"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.258984883Z","hostname":"ip-10-150-1-168","pid":22474,"class":"DnsConfig"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259012045Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Fleet"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259039136Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Inventory"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259065918Z","hostname":"ip-10-150-1-168","pid":22474,"class":"IpPoolList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259093709Z","hostname":"ip-10-150-1-168","pid":22474,"class":"ConsoleSessionList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259121781Z","hostname":"ip-10-150-1-168","pid":22474,"class":"DeviceAuthRequestList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259148922Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloCertificateList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259176773Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloIdentityProviderList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259203835Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloUserList"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259230646Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Project"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.25928659Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Disk"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259319521Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Snapshot"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259347293Z","hostname":"ip-10-150-1-168","pid":22474,"class":"ProjectImage"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259375154Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Instance"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259401705Z","hostname":"ip-10-150-1-168","pid":22474,"class":"IpPool"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259430237Z","hostname":"ip-10-150-1-168","pid":22474,"class":"InstanceNetworkInterface"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259458089Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Vpc"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.25948482Z","hostname":"ip-10-150-1-168","pid":22474,"class":"VpcRouter"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259513142Z","hostname":"ip-10-150-1-168","pid":22474,"class":"RouterRoute"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.259541043Z","hostname":"ip-10-150-1-168","pid":22474,"class":"VpcSubnet"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.260497424Z","hostname":"ip-10-150-1-168","pid":22474,"class":"FloatingIp"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.260556328Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Image"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.26060368Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloImage"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.260665544Z","hostname":"ip-10-150-1-168","pid":22474,"class":"AddressLot"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.260740677Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Blueprint"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.260798101Z","hostname":"ip-10-150-1-168","pid":22474,"class":"LoopbackAddress"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.260843503Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Certificate"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.260901266Z","hostname":"ip-10-150-1-168","pid":22474,"class":"ConsoleSession"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262117591Z","hostname":"ip-10-150-1-168","pid":22474,"class":"DeviceAuthRequest"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262160344Z","hostname":"ip-10-150-1-168","pid":22474,"class":"DeviceAccessToken"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262194756Z","hostname":"ip-10-150-1-168","pid":22474,"class":"PhysicalDisk"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262229868Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Rack"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.26228668Z","hostname":"ip-10-150-1-168","pid":22474,"class":"RoleBuiltin"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262323462Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SshKey"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262355234Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Silo"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262385826Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloUser"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262415278Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SiloGroup"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262444649Z","hostname":"ip-10-150-1-168","pid":22474,"class":"IdentityProvider"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262475351Z","hostname":"ip-10-150-1-168","pid":22474,"class":"SamlIdentityProvider"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262533764Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Sled"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262569646Z","hostname":"ip-10-150-1-168","pid":22474,"class":"TufRepo"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262600137Z","hostname":"ip-10-150-1-168","pid":22474,"class":"TufArtifact"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262628889Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Zpool"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.26265896Z","hostname":"ip-10-150-1-168","pid":22474,"class":"Service"} {"msg":"registering Oso class","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262688382Z","hostname":"ip-10-150-1-168","pid":22474,"class":"UserBuiltin"} {"msg":"full Oso configuration","v":0,"name":"test_insert_multiple_vpcs_fails","level":30,"time":"2024-02-14T20:43:11.262717554Z","hostname":"ip-10-150-1-168","pid":22474,"config":"#\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system. All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n actor.authenticated and\n has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - \"create_child\": required to create child resources (of any type)\n#\n# - \"list_children\": required to list child resources (of all types) of a\n# resource\n#\n# - \"modify\": required to modify or delete a resource\n#\n# - \"read\": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project. The specific roles\n# are oriented around intended use-cases:\n#\n# - \"admin\": has all permissions on the resource\n#\n# - \"collaborator\": has \"read\", \"list_children\", and \"create_child\", plus\n# the \"admin\" role for child resources. The idea is that if you're an\n# Organization Collaborator, you have full control over the Projects within\n# the Organization, but you cannot modify or delete the Organization itself.\n#\n# - \"viewer\": has \"read\" and \"list_children\" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level. For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin (superuser for the whole system)\n# - fleet.collaborator (can manage Silos)\n# - fleet.viewer (can read most non-siloed resources in the system)\n# - silo.admin (superuser for the silo)\n# - silo.collaborator (can create and own Organizations)\n# - silo.viewer (can read most resources within the Silo)\n# - organization.admin (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer (can read most resources within the Organization)\n# - project.admin (complete control over a Project)\n# - project.collaborator (can manage all resources within the Project)\n# - project.viewer (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below). We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# \"Fleet\" is a global singleton representing the whole system. The name comes\n# from the idea described in RFD 24, but it's not quite right. This probably\n# should be more like \"Region\" or \"AvailabilityZone\". The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"read\",\n\t \"create_child\",\n\t];\n\n\troles = [\n\t # Roles that can be attached by users\n\t \"admin\",\n\t \"collaborator\",\n\t \"viewer\",\n\n\t # Internal-only roles\n\t \"external-authenticator\"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"read\",\n\t \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Permissions implied by roles on this resource's parent (Fleet). Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo. To achieve this, we use permission rules here. (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"collaborator\" on \"parent_fleet\";\n\n\t# external authenticator has to create silo users\n\t\"list_children\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo. That's\n# not quite the same as having the \"viewer\" role. For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using \"POST /organizations\", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404. This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"read\",\n\t \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t\"admin\" if \"collaborator\" on \"parent_silo\";\n\t\"viewer\" if \"viewer\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro. Some resources require custom Polar code. Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"read\",\n\t \"create_child\",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users. This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"read\" on \"parent_fleet\";\n\t\"read\" if \"read\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n if silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"read\",\n\t \"create_child\",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { silo_user: SiloUser };\n\n\t\"read\" if \"read\" on \"silo_user\";\n\t\"modify\" if \"modify\" on \"silo_user\";\n}\nhas_relation(user: SiloUser, \"silo_user\", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t \"read\",\n\t \"modify\",\n\t \"create_child\",\n\t \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t \"read\",\n\t \"modify\",\n\t \"create_child\",\n\t \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database. These are used either at the top level\n# of the API path (e.g., \"/v1/system/ip-pools\") or as an implementation detail of the system\n# (in the case of console sessions and \"Database\"). The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet. None of these resources defines their own roles.\n#\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t# \"external-authenticator\" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos. These\n\t# operations necessarily need to read and modify DNS configuration.\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"modify\" if \"external-authenticator\" on \"parent_fleet\";\n\t# \"admin\" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t \"list_children\", # list blueprints\n\t \"create_child\", # create blueprint\n\t \"read\", # read the current target\n\t \"modify\", # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/ip-pools\" in the API\nresource IpPoolList {\n\tpermissions = [\n\t \"list_children\",\n\t \"modify\",\n\t \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list IP Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, \"create_child\", ip_pool: IpPool)\n\tif silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration. This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on. This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission. For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's users. This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on. This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission. For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions. This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif has_role(actor, \"external-authenticator\", silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with. Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(_actor: AuthenticatedActor, \"read\", _device_auth: DeviceAuthRequest);\nhas_permission(_actor: AuthenticatedActor, \"modify\", _device_auth: DeviceAuthRequest);\n\nhas_permission(actor: AuthenticatedActor, \"read\", device_token: DeviceAccessToken)\n\tif has_role(actor, \"external-authenticator\", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", identity_provider: IdentityProvider)\n\tif has_role(actor, \"external-authenticator\", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, \"external-authenticator\", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t # \"query\" is required to perform any query against the database,\n\t # whether a read or write query. This is checked when an operation\n\t # checks out a database connection from the connection pool.\n\t #\n\t # Any authenticated user gets this permission. There's generally\n\t # some other authz check involved in the database query. For\n\t # example, if you're querying the database to \"read\" a \"Project\", we\n\t # should also be checking that. So why do we do this at all? It's\n\t # a belt-and-suspenders measure so that if we somehow introduced an\n\t # unauthenticated code path that hits the database, it cannot be\n\t # used to DoS the database because we won't allow the operation to\n\t # make the query. (As long as the code path _is_ authenticated, we\n\t # can use throttling mechanisms to prevent DoS.)\n\t \"query\",\n\n\t # \"modify\" is required to populate database data that's delivered\n\t # with the system. It should also be required for schema changes,\n\t # when we support those. This is separate from \"query\" so that we\n\t # cannot accidentally invoke these code paths from API calls and\n\t # other general functions.\n\t \"modify\"\n\t];\n}\n\n# All authenticated users have the \"query\" permission on the database.\nhas_permission(_actor: AuthenticatedActor, \"query\", _resource: Database);\n\n# The \"db-init\" user is the only one with the \"modify\" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"modify\", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"create_child\", _resource: IpPoolList);\n# It also has \"admin\" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, \"admin\", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, \"admin\", _silo: Silo);\n\n\n\n resource Disk {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: Disk)\n if child.project = parent;\n \n\n resource Snapshot {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: Snapshot)\n if child.project = parent;\n \n\n resource ProjectImage {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: ProjectImage)\n if child.project = parent;\n \n\n resource Instance {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: Instance)\n if child.project = parent;\n \n\n resource IpPool {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: IpPool)\n if child.fleet = fleet;\n \n\n resource InstanceNetworkInterface {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = {\n containing_project: Project,\n parent: Instance\n };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(project: Project, \"containing_project\", child: InstanceNetworkInterface)\n if has_relation(project, \"containing_project\", child.instance);\n\n has_relation(parent: Instance, \"parent\", child: InstanceNetworkInterface)\n if child.instance = parent;\n \n\n resource Vpc {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: Vpc)\n if child.project = parent;\n \n\n resource VpcRouter {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = {\n containing_project: Project,\n parent: Vpc\n };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(project: Project, \"containing_project\", child: VpcRouter)\n if has_relation(project, \"containing_project\", child.vpc);\n\n has_relation(parent: Vpc, \"parent\", child: VpcRouter)\n if child.vpc = parent;\n \n\n resource RouterRoute {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = {\n containing_project: Project,\n parent: VpcRouter\n };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(project: Project, \"containing_project\", child: RouterRoute)\n if has_relation(project, \"containing_project\", child.vpc_router);\n\n has_relation(parent: VpcRouter, \"parent\", child: RouterRoute)\n if child.vpc_router = parent;\n \n\n resource VpcSubnet {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = {\n containing_project: Project,\n parent: Vpc\n };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(project: Project, \"containing_project\", child: VpcSubnet)\n if has_relation(project, \"containing_project\", child.vpc);\n\n has_relation(parent: Vpc, \"parent\", child: VpcSubnet)\n if child.vpc = parent;\n \n\n resource FloatingIp {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_project: Project };\n \"list_children\" if \"viewer\" on \"containing_project\";\n \"read\" if \"viewer\" on \"containing_project\";\n \"modify\" if \"collaborator\" on \"containing_project\";\n \"create_child\" if \"collaborator\" on \"containing_project\";\n }\n\n has_relation(parent: Project, \"containing_project\", child: FloatingIp)\n if child.project = parent;\n \n\n resource Image {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_silo: Silo };\n \"list_children\" if \"viewer\" on \"containing_silo\";\n \"read\" if \"viewer\" on \"containing_silo\";\n \"modify\" if \"collaborator\" on \"containing_silo\";\n \"create_child\" if \"collaborator\" on \"containing_silo\";\n }\n\n has_relation(parent: Silo, \"containing_silo\", child: Image)\n if child.silo = parent;\n \n\n resource SiloImage {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n\n relations = { containing_silo: Silo };\n \"list_children\" if \"viewer\" on \"containing_silo\";\n \"read\" if \"viewer\" on \"containing_silo\";\n \"modify\" if \"collaborator\" on \"containing_silo\";\n \"create_child\" if \"collaborator\" on \"containing_silo\";\n }\n\n has_relation(parent: Silo, \"containing_silo\", child: SiloImage)\n if child.silo = parent;\n \n\n resource AddressLot {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: AddressLot)\n if child.fleet = fleet;\n \n\n resource Blueprint {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: Blueprint)\n if child.fleet = fleet;\n \n\n resource LoopbackAddress {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: LoopbackAddress)\n if child.fleet = fleet;\n \n\n\n resource ConsoleSession {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: ConsoleSession)\n if child.fleet = fleet;\n \n\n resource DeviceAuthRequest {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAuthRequest)\n if child.fleet = fleet;\n \n\n resource DeviceAccessToken {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAccessToken)\n if child.fleet = fleet;\n \n\n resource PhysicalDisk {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: PhysicalDisk)\n if child.fleet = fleet;\n \n\n resource Rack {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: Rack)\n if child.fleet = fleet;\n \n\n resource RoleBuiltin {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: RoleBuiltin)\n if child.fleet = fleet;\n \n\n\n\n\n\n\n\n resource Sled {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: Sled)\n if child.fleet = fleet;\n \n\n resource TufRepo {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: TufRepo)\n if child.fleet = fleet;\n \n\n resource TufArtifact {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: TufArtifact)\n if child.fleet = fleet;\n \n\n resource Zpool {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: Zpool)\n if child.fleet = fleet;\n \n\n resource Service {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: Service)\n if child.fleet = fleet;\n \n\n resource UserBuiltin {\n permissions = [\n \"list_children\",\n \"modify\",\n \"read\",\n \"create_child\",\n ];\n \n relations = { parent_fleet: Fleet };\n \"list_children\" if \"viewer\" on \"parent_fleet\";\n \"read\" if \"viewer\" on \"parent_fleet\";\n \"modify\" if \"admin\" on \"parent_fleet\";\n \"create_child\" if \"admin\" on \"parent_fleet\";\n }\n has_relation(fleet: Fleet, \"parent_fleet\", child: UserBuiltin)\n if child.fleet = fleet;\n "} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.273045479Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.273260361Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000000","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.273291622Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.273331865Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.273846242Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.287625722Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.287711837Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.287748509Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.288281128Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.290029911Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, 001de000-5110-4000-8000-000000000000, \"admin\")} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.292655892Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.292842533Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.292899156Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.293299067Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.315379134Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.315448508Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.315939284Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.364362476Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.364427469Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.364931266Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.366042126Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.366264438Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.366594756Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.367621751Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }, key: e9c404e7-5eb3-422a-a314-aa8b693700f5, lookup_type: ById(e9c404e7-5eb3-422a-a314-aa8b693700f5) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.368003921Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"e9c404e7-5eb3-422a-a314-aa8b693700f5","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.368058044Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.368113487Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.368251025Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.370498605Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000000","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.370553948Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.37059646Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.37356938Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.382449877Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.382521111Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.382566453Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.383542086Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.385465319Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, 001de000-5110-4000-8000-000000000000, \"admin\")} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.390008754Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }, key: e9c404e7-5eb3-422a-a314-aa8b693700f5, lookup_type: ById(e9c404e7-5eb3-422a-a314-aa8b693700f5) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.390083328Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }, key: e9c404e7-5eb3-422a-a314-aa8b693700f5, lookup_type: ById(e9c404e7-5eb3-422a-a314-aa8b693700f5) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.3901324Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"e9c404e7-5eb3-422a-a314-aa8b693700f5","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.390179843Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.390226145Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.390670779Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.393064628Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-5110-4000-8000-000000000000","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.393260429Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.393299751Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.393634449Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"loading roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.397504477Z","hostname":"ip-10-150-1-168","pid":22474,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.3975643Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.397605402Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.398660568Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.413046401Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, 001de000-5110-4000-8000-000000000000, \"admin\")} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.422382633Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }, key: e9c404e7-5eb3-422a-a314-aa8b693700f5, lookup_type: ById(e9c404e7-5eb3-422a-a314-aa8b693700f5) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.422472928Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.42251463Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.423037898Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"authorize begin","v":0,"name":"test_insert_multiple_vpcs_fails","level":10,"time":"2024-02-14T20:43:11.494130378Z","hostname":"ip-10-150-1-168","pid":22474,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"} {"msg":"roles","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.494196552Z","hostname":"ip-10-150-1-168","pid":22474,"roles":"RoleSet { roles: {} }"} {"msg":"authorize result","v":0,"name":"test_insert_multiple_vpcs_fails","level":20,"time":"2024-02-14T20:43:11.494239094Z","hostname":"ip-10-150-1-168","pid":22474,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}