{"msg":"cockroach temporary directory: /var/tmp/omicron_tmp/.tmpUGOeUY","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:11.147396517Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"cockroach: copying from seed tarball (/var/tmp/omicron_tmp/crdb-base-build/0ba558b6703680b8ede35fabd6978a943490bd8054f72957a6e548a757ea0cf2.tar) to storage directory (/var/tmp/omicron_tmp/.tmpUGOeUY/data)","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:11.147473511Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"cockroach command line: cockroach start-single-node --insecure --http-addr=:0 --store=path=/var/tmp/omicron_tmp/.tmpUGOeUY/data,ballast-size=0 --listen-addr [::1]:0 --listening-url-file /var/tmp/omicron_tmp/.tmpUGOeUY/listen-url","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:11.161241862Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"cockroach environment: BUILDOMAT_JOB_ID=01HPMN2STWTAWNNTNSRX3P7732 BUILDOMAT_TASK_ID=4 CARGO=/home/build/.rustup/toolchains/1.74.1-x86_64-unknown-linux-gnu/bin/cargo CARGO_HOME=/home/build/.cargo CARGO_INCREMENTAL=0 CARGO_MANIFEST_DIR=/work/oxidecomputer/omicron/nexus/db-queries CARGO_PKG_AUTHORS= CARGO_PKG_DESCRIPTION= CARGO_PKG_HOMEPAGE= CARGO_PKG_LICENSE=MPL-2.0 CARGO_PKG_LICENSE_FILE= CARGO_PKG_NAME=nexus-db-queries CARGO_PKG_REPOSITORY= CARGO_PKG_RUST_VERSION= CARGO_PKG_VERSION=0.1.0 CARGO_PKG_VERSION_MAJOR=0 CARGO_PKG_VERSION_MINOR=1 CARGO_PKG_VERSION_PATCH=0 CARGO_PKG_VERSION_PRE= CI=true CRDB_SEED_TAR=/var/tmp/omicron_tmp/crdb-base-build/0ba558b6703680b8ede35fabd6978a943490bd8054f72957a6e548a757ea0cf2.tar GITHUB_BRANCH=order-next-item-subquery GITHUB_REF=refs/heads/order-next-item-subquery GITHUB_REPOSITORY=oxidecomputer/omicron GITHUB_SHA=604b19b55a25857d0a501c266b1b25941fa11b3e GOTRACEBACK=crash HOME=/home/build LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8 LD_LIBRARY_PATH=/work/oxidecomputer/omicron/target/debug/build/blake3-feeaa7149c3596f1/out:/work/oxidecomputer/omicron/target/debug/build/bzip2-sys-a48f149f01e13be4/out/lib:/work/oxidecomputer/omicron/target/debug/build/ring-36a1c9477f8b2f8d/out:/work/oxidecomputer/omicron/target/debug/build/ring-ba6b6ec6a6f9aa54/out:/work/oxidecomputer/omicron/target/debug/build/tofino-d74860998be2bf98/out:/work/oxidecomputer/omicron/target/debug/deps:/work/oxidecomputer/omicron/target/debug:/home/build/.rustup/toolchains/1.74.1-x86_64-unknown-linux-gnu/lib LOGNAME=build NEXTEST=1 NEXTEST_EXECUTION_MODE=process-per-test NEXTEST_LD_LIBRARY_PATH=/work/oxidecomputer/omicron/target/debug/build/blake3-feeaa7149c3596f1/out:/work/oxidecomputer/omicron/target/debug/build/bzip2-sys-a48f149f01e13be4/out/lib:/work/oxidecomputer/omicron/target/debug/build/ring-36a1c9477f8b2f8d/out:/work/oxidecomputer/omicron/target/debug/build/ring-ba6b6ec6a6f9aa54/out:/work/oxidecomputer/omicron/target/debug/build/tofino-d74860998be2bf98/out:/work/oxidecomputer/omicron/target/debug/deps:/work/oxidecomputer/omicron/target/debug:/home/build/.rustup/toolchains/1.74.1-x86_64-unknown-linux-gnu/lib NEXTEST_RUN_ID=3d3fc513-6fdb-4fb5-9570-45efa6c0d5c6 OUT_DIR=/work/oxidecomputer/omicron/target/debug/build/nexus-db-queries-fe99d87e837cdda9/out PATH=/work/oxidecomputer/omicron/out/mgd/root/opt/oxide/mgd/bin:/work/oxidecomputer/omicron/out/dendrite-stub/bin:/work/oxidecomputer/omicron/out/clickhouse:/work/oxidecomputer/omicron/out/cockroachdb/bin:/home/build/.cargo/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/ooce/bin:/opt/ooce/sbin PWD=/work/oxidecomputer/omicron RUSTC_BOOTSTRAP=1 RUSTDOCFLAGS=-D warnings RUSTFLAGS=-D warnings RUSTUP_HOME=/home/build/.rustup RUSTUP_TOOLCHAIN=1.74.1-x86_64-unknown-linux-gnu RUST_BACKTRACE=1 RUST_RECURSION_COUNT=1 SHLVL=1 SSL_CERT_DIR=/usr/lib/ssl/certs SSL_CERT_FILE=/usr/lib/ssl/certs/ca-certificates.crt TMPDIR=/var/tmp/omicron_tmp TZ=UTC USER=build __NEXTEST_ATTEMPT=1 __NEXTEST_ORIGINAL_CARGO_MANIFEST_DIR=/work/oxidecomputer/omicron/nexus/db-queries","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:11.161344427Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"cockroach pid: 22681","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:12.382771047Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"cockroach listen URL: postgresql://root@[::1]:45803/omicron?sslmode=disable","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:12.383449423Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"database connection pool","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:12.383490455Z","hostname":"ip-10-150-1-168","pid":22664,"component":"db::Pool","database_url":"postgresql://root@[::1]:45803/omicron?sslmode=disable"}
{"msg":"Compatible database schema: 33.0.1","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.20190385Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.202236437Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Action"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.202271059Z","hostname":"ip-10-150-1-168","pid":22664,"class":"AnyActor"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.202364544Z","hostname":"ip-10-150-1-168","pid":22664,"class":"AuthenticatedActor"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203280013Z","hostname":"ip-10-150-1-168","pid":22664,"class":"BlueprintConfig"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203330536Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Database"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203380029Z","hostname":"ip-10-150-1-168","pid":22664,"class":"DnsConfig"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203423151Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Fleet"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203478504Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Inventory"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203544268Z","hostname":"ip-10-150-1-168","pid":22664,"class":"IpPoolList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203628412Z","hostname":"ip-10-150-1-168","pid":22664,"class":"ConsoleSessionList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203705016Z","hostname":"ip-10-150-1-168","pid":22664,"class":"DeviceAuthRequestList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.20377542Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloCertificateList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203805742Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloIdentityProviderList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203881016Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloUserList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203941879Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Project"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.203994922Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Disk"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204028024Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Snapshot"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204071916Z","hostname":"ip-10-150-1-168","pid":22664,"class":"ProjectImage"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204102468Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Instance"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204134939Z","hostname":"ip-10-150-1-168","pid":22664,"class":"IpPool"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204174601Z","hostname":"ip-10-150-1-168","pid":22664,"class":"InstanceNetworkInterface"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204214794Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Vpc"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204250196Z","hostname":"ip-10-150-1-168","pid":22664,"class":"VpcRouter"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204284718Z","hostname":"ip-10-150-1-168","pid":22664,"class":"RouterRoute"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204322629Z","hostname":"ip-10-150-1-168","pid":22664,"class":"VpcSubnet"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204357782Z","hostname":"ip-10-150-1-168","pid":22664,"class":"FloatingIp"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204390963Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Image"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204420585Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloImage"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204454967Z","hostname":"ip-10-150-1-168","pid":22664,"class":"AddressLot"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204503879Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Blueprint"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204564022Z","hostname":"ip-10-150-1-168","pid":22664,"class":"LoopbackAddress"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204619365Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Certificate"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204671718Z","hostname":"ip-10-150-1-168","pid":22664,"class":"ConsoleSession"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204713281Z","hostname":"ip-10-150-1-168","pid":22664,"class":"DeviceAuthRequest"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204794915Z","hostname":"ip-10-150-1-168","pid":22664,"class":"DeviceAccessToken"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204850798Z","hostname":"ip-10-150-1-168","pid":22664,"class":"PhysicalDisk"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.204976845Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Rack"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205034178Z","hostname":"ip-10-150-1-168","pid":22664,"class":"RoleBuiltin"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205099111Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SshKey"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205152344Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Silo"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205195816Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloUser"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205242099Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloGroup"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205310593Z","hostname":"ip-10-150-1-168","pid":22664,"class":"IdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205368436Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SamlIdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205420348Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Sled"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205467791Z","hostname":"ip-10-150-1-168","pid":22664,"class":"TufRepo"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205513884Z","hostname":"ip-10-150-1-168","pid":22664,"class":"TufArtifact"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205555986Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Zpool"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205594348Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Service"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205644Z","hostname":"ip-10-150-1-168","pid":22664,"class":"UserBuiltin"}
{"msg":"full Oso configuration","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.205701334Z","hostname":"ip-10-150-1-168","pid":22664,"config":"#\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system.  All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n    actor.authenticated and\n    has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - \"create_child\": required to create child resources (of any type)\n#\n# - \"list_children\": required to list child resources (of all types) of a\n#   resource\n#\n# - \"modify\": required to modify or delete a resource\n#\n# - \"read\": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project.  The specific roles\n# are oriented around intended use-cases:\n#\n# - \"admin\": has all permissions on the resource\n#\n# - \"collaborator\": has \"read\", \"list_children\", and \"create_child\", plus\n#   the \"admin\" role for child resources.  The idea is that if you're an\n#   Organization Collaborator, you have full control over the Projects within\n#   the Organization, but you cannot modify or delete the Organization itself.\n#\n# - \"viewer\": has \"read\" and \"list_children\" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level.  For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin           (superuser for the whole system)\n# - fleet.collaborator    (can manage Silos)\n# - fleet.viewer          (can read most non-siloed resources in the system)\n# - silo.admin            (superuser for the silo)\n# - silo.collaborator     (can create and own Organizations)\n# - silo.viewer           (can read most resources within the Silo)\n# - organization.admin    (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer   (can read most resources within the Organization)\n# - project.admin         (complete control over a Project)\n# - project.collaborator  (can manage all resources within the Project)\n# - project.viewer        (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below).  We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# \"Fleet\" is a global singleton representing the whole system.  The name comes\n# from the idea described in RFD 24, but it's not quite right.  This probably\n# should be more like \"Region\" or \"AvailabilityZone\".  The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\troles = [\n\t    # Roles that can be attached by users\n\t    \"admin\",\n\t    \"collaborator\",\n\t    \"viewer\",\n\n\t    # Internal-only roles\n\t    \"external-authenticator\"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Permissions implied by roles on this resource's parent (Fleet).  Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo.  To achieve this, we use permission rules here.  (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"collaborator\" on \"parent_fleet\";\n\n\t# external authenticator has to create silo users\n\t\"list_children\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo.  That's\n# not quite the same as having the \"viewer\" role.  For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using \"POST /organizations\", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404.  This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t\"admin\" if \"collaborator\" on \"parent_silo\";\n\t\"viewer\" if \"viewer\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro.  Some resources require custom Polar code.  Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users.  This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"read\" on \"parent_fleet\";\n\t\"read\" if \"read\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n    if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n    if silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { silo_user: SiloUser };\n\n\t\"read\" if \"read\" on \"silo_user\";\n\t\"modify\" if \"modify\" on \"silo_user\";\n}\nhas_relation(user: SiloUser, \"silo_user\", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database.  These are used either at the top level\n# of the API path (e.g., \"/v1/system/ip-pools\") or as an implementation detail of the system\n# (in the case of console sessions and \"Database\").  The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet.  None of these resources defines their own roles.\n#\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t# \"external-authenticator\" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos.  These\n\t# operations necessarily need to read and modify DNS configuration.\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"modify\" if \"external-authenticator\" on \"parent_fleet\";\n\t# \"admin\" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t    \"list_children\", # list blueprints\n\t    \"create_child\",  # create blueprint\n\t    \"read\",          # read the current target\n\t    \"modify\",        # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/ip-pools\" in the API\nresource IpPoolList {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list IP Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, \"create_child\", ip_pool: IpPool)\n\tif silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration.  This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on.  This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission.  For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's users.  This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on.  This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission.  For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions.  This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif has_role(actor, \"external-authenticator\", silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with.  Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(_actor: AuthenticatedActor, \"read\", _device_auth: DeviceAuthRequest);\nhas_permission(_actor: AuthenticatedActor, \"modify\", _device_auth: DeviceAuthRequest);\n\nhas_permission(actor: AuthenticatedActor, \"read\", device_token: DeviceAccessToken)\n\tif has_role(actor, \"external-authenticator\", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", identity_provider: IdentityProvider)\n\tif has_role(actor, \"external-authenticator\", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, \"external-authenticator\", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t    # \"query\" is required to perform any query against the database,\n\t    # whether a read or write query.  This is checked when an operation\n\t    # checks out a database connection from the connection pool.\n\t    #\n\t    # Any authenticated user gets this permission.  There's generally\n\t    # some other authz check involved in the database query.  For\n\t    # example, if you're querying the database to \"read\" a \"Project\", we\n\t    # should also be checking that.  So why do we do this at all?  It's\n\t    # a belt-and-suspenders measure so that if we somehow introduced an\n\t    # unauthenticated code path that hits the database, it cannot be\n\t    # used to DoS the database because we won't allow the operation to\n\t    # make the query.  (As long as the code path _is_ authenticated, we\n\t    # can use throttling mechanisms to prevent DoS.)\n\t    \"query\",\n\n\t    # \"modify\" is required to populate database data that's delivered\n\t    # with the system.  It should also be required for schema changes,\n\t    # when we support those.  This is separate from \"query\" so that we\n\t    # cannot accidentally invoke these code paths from API calls and\n\t    # other general functions.\n\t    \"modify\"\n\t];\n}\n\n# All authenticated users have the \"query\" permission on the database.\nhas_permission(_actor: AuthenticatedActor, \"query\", _resource: Database);\n\n# The \"db-init\" user is the only one with the \"modify\" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"modify\", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"create_child\", _resource: IpPoolList);\n# It also has \"admin\" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, \"admin\", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, \"admin\", _silo: Silo);\n\n\n\n                resource Disk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Disk)\n                        if child.project = parent;\n            \n\n                resource Snapshot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Snapshot)\n                        if child.project = parent;\n            \n\n                resource ProjectImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: ProjectImage)\n                        if child.project = parent;\n            \n\n                resource Instance {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Instance)\n                        if child.project = parent;\n            \n\n                resource IpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: IpPool)\n                    if child.fleet = fleet;\n            \n\n                resource InstanceNetworkInterface {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Instance\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InstanceNetworkInterface)\n                    if has_relation(project, \"containing_project\", child.instance);\n\n                has_relation(parent: Instance, \"parent\", child: InstanceNetworkInterface)\n                    if child.instance = parent;\n            \n\n                resource Vpc {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Vpc)\n                        if child.project = parent;\n            \n\n                resource VpcRouter {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcRouter)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcRouter)\n                    if child.vpc = parent;\n            \n\n                resource RouterRoute {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: VpcRouter\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: RouterRoute)\n                    if has_relation(project, \"containing_project\", child.vpc_router);\n\n                has_relation(parent: VpcRouter, \"parent\", child: RouterRoute)\n                    if child.vpc_router = parent;\n            \n\n                resource VpcSubnet {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcSubnet)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcSubnet)\n                    if child.vpc = parent;\n            \n\n                resource FloatingIp {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: FloatingIp)\n                        if child.project = parent;\n            \n\n                resource Image {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: Image)\n                    if child.silo = parent;\n            \n\n                resource SiloImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: SiloImage)\n                    if child.silo = parent;\n            \n\n                resource AddressLot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: AddressLot)\n                    if child.fleet = fleet;\n            \n\n                resource Blueprint {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Blueprint)\n                    if child.fleet = fleet;\n            \n\n                resource LoopbackAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: LoopbackAddress)\n                    if child.fleet = fleet;\n            \n\n\n                resource ConsoleSession {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: ConsoleSession)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAuthRequest {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAuthRequest)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAccessToken {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAccessToken)\n                    if child.fleet = fleet;\n            \n\n                resource PhysicalDisk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: PhysicalDisk)\n                    if child.fleet = fleet;\n            \n\n                resource Rack {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Rack)\n                    if child.fleet = fleet;\n            \n\n                resource RoleBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: RoleBuiltin)\n                    if child.fleet = fleet;\n            \n\n\n\n\n\n\n\n                resource Sled {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Sled)\n                    if child.fleet = fleet;\n            \n\n                resource TufRepo {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufRepo)\n                    if child.fleet = fleet;\n            \n\n                resource TufArtifact {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufArtifact)\n                    if child.fleet = fleet;\n            \n\n                resource Zpool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Zpool)\n                    if child.fleet = fleet;\n            \n\n                resource Service {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Service)\n                    if child.fleet = fleet;\n            \n\n                resource UserBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: UserBuiltin)\n                    if child.fleet = fleet;\n            "}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.213142994Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.213214538Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.214818154Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in users","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.215028885Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.215071598Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.21511225Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.215410906Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 5 built-in users","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.242928754Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.243003898Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.2430376Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.245009246Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.245070159Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.24509685Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.245128282Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.245576736Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 10 built-in roles","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.269309622Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.269364935Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.269394136Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.271242785Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in role assignments","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.271498899Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.271557832Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.271618956Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.273574841Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 4 built-in role assignments","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.29773986Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.297839105Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.297893288Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.299600529Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in silos","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.299737967Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.299765388Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.29979777Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.300039543Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 2 built-in silos","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.353424891Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.353504565Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.353550088Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.35414686Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.374210468Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.37442149Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.37684674Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in projects","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.376906363Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.376946575Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.378610085Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.378647987Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.379674832Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.379721734Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.379769537Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.379803559Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.380361119Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.383867207Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.385531366Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.385581369Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.385612271Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.385678584Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.388673755Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.388793782Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.388849045Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.388891607Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.388929039Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.389443407Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.391476436Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.392541943Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.392585875Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.392619437Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.393016639Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.395664161Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.395713804Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.395809329Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.396103124Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created built-in services project","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.426877748Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.426943182Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.426977733Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.428488014Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in VPCs","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.429078796Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.429126169Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.429180712Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.429228324Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.449178636Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.449237949Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.449728186Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.450801374Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.451159603Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.451197085Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.451232747Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.451339563Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.45222893Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.453101267Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.45315466Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.453198542Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.453616175Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.453681299Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.453724301Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.454170375Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.455288285Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.45891521Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"successful lookup of siloed resource \"Project\" using built-in user","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.459086499Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.459146642Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.459217926Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.45929366Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.459373774Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.462595997Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.468569428Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.468644952Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.468680104Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.46915482Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.470134122Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.470196326Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.470225847Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.470711773Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.471598341Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.475057217Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.47511972Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.475149282Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.475557723Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.511300344Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.511377538Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.512086086Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.534054927Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.534255388Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.535164347Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.53522411Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.535295064Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.536122458Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.537132072Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.537168864Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.537206406Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.537565426Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.53764107Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.537693073Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.538176248Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.539408055Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.545167554Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.545236408Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.54528072Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.546229351Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.557682996Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.557771891Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.557843455Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.557905938Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.558252747Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.569258249Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.569398216Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.569441579Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.570136836Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.571099998Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.57114101Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.571168791Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.572245629Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.575748787Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.583329674Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.58342117Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.583475412Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.58417223Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in VPC firewall rules","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.627486707Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.627567121Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.627610874Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.62809282Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.635880548Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.635961632Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.636465029Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.637424461Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.637464073Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.637896706Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.638907671Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.639096581Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.639134673Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.639182145Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.639408638Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.64038657Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.641057556Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.641097348Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.64113241Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.641632597Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.641670049Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.64169649Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.642355006Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.64336956Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.648144057Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"successful lookup of siloed resource \"Vpc\" using built-in user","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.648286885Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.648323377Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Read","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.648360829Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.648396421Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.648430973Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.648725048Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.649911392Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.650072741Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.650123604Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.650468312Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.651295617Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.651813474Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.651861737Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.651899689Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.663985248Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.669002448Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Read","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.669059661Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.669089393Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.669472143Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.694500038Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.694584432Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.694639526Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.695665421Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.69602498Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.697951153Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.698400108Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.698476572Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.698525044Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.699635394Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.700258227Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.700295859Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.700321141Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.701002067Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.706061269Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.706152624Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.706193256Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.706504863Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created built-in VPC firewall rules","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.72488588Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"attempting to create built-in VPC Subnets","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.724976825Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.725027908Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.725082551Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.725684243Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.766542839Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.767504101Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.767569394Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.768189358Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.7682286Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.768656053Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.77046949Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.770545874Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.770603967Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.77065996Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.770717693Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.77140527Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.771462443Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.771516666Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.771839784Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.772860578Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.772952574Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.773006616Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.773281491Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.774109816Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.77792483Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"successful lookup of siloed resource \"Vpc\" using built-in user","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.778009715Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.778059678Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.77810136Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.778534753Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.794554574Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.794655739Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.794717943Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.795651923Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.795714766Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.804678668Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.804740061Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.804777233Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.805318132Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.806422952Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.806477855Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.806541048Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.806889457Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.807794386Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.812275566Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.820430844Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.820486167Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.821048998Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.821998289Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.822713427Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.82276586Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.822809242Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.822852564Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.823231525Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.8233187Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.823372502Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.823737852Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.824604498Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.824660261Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.824734976Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.825039512Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.825988093Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.829827249Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.837565285Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.838830483Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.838896636Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.839031964Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.839182092Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.839320789Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.839449786Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.84008268Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.840914855Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.840971488Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.8410169Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.841400971Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.842385594Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.842443447Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.842479269Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.842946844Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.843945548Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.849399501Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created built-in services vpc subnets","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.859695424Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"created built-in services vpc","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.859749247Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.85980044Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.859866833Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.861253648Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create silo users","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.862712716Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.862752548Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.86277932Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.862800951Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 2 silo users","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.875716675Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"attempting to create silo user role assignments","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.875794699Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.875848692Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.875904615Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.876303016Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 2 silo user role assignments","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.886644672Z","hostname":"ip-10-150-1-168","pid":22664}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.886707616Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.886769179Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.887302968Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.893594086Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.89367232Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.894168876Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.914776454Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.9148869Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.914948533Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.915004316Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.915391796Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.916277794Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.917759094Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.917796936Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.917822637Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.918023458Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.940602651Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.940663515Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.940725688Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.94075857Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.941251166Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.942196787Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.943622944Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:13.943944361Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.943988063Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:13.944020235Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.994438874Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Action"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.994530289Z","hostname":"ip-10-150-1-168","pid":22664,"class":"AnyActor"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.994581611Z","hostname":"ip-10-150-1-168","pid":22664,"class":"AuthenticatedActor"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.994629114Z","hostname":"ip-10-150-1-168","pid":22664,"class":"BlueprintConfig"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.994672756Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Database"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.994712619Z","hostname":"ip-10-150-1-168","pid":22664,"class":"DnsConfig"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.994757941Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Fleet"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.994802194Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Inventory"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.994845116Z","hostname":"ip-10-150-1-168","pid":22664,"class":"IpPoolList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.99492392Z","hostname":"ip-10-150-1-168","pid":22664,"class":"ConsoleSessionList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.994969963Z","hostname":"ip-10-150-1-168","pid":22664,"class":"DeviceAuthRequestList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.995013555Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloCertificateList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.995056117Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloIdentityProviderList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.995098359Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloUserList"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.995157462Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Project"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.995206205Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Disk"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996024179Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Snapshot"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996077102Z","hostname":"ip-10-150-1-168","pid":22664,"class":"ProjectImage"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996125845Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Instance"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996191308Z","hostname":"ip-10-150-1-168","pid":22664,"class":"IpPool"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996248781Z","hostname":"ip-10-150-1-168","pid":22664,"class":"InstanceNetworkInterface"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996301964Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Vpc"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996373658Z","hostname":"ip-10-150-1-168","pid":22664,"class":"VpcRouter"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996449222Z","hostname":"ip-10-150-1-168","pid":22664,"class":"RouterRoute"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996532486Z","hostname":"ip-10-150-1-168","pid":22664,"class":"VpcSubnet"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996608631Z","hostname":"ip-10-150-1-168","pid":22664,"class":"FloatingIp"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996695355Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Image"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.996745598Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloImage"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.997609544Z","hostname":"ip-10-150-1-168","pid":22664,"class":"AddressLot"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.997675968Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Blueprint"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.99772052Z","hostname":"ip-10-150-1-168","pid":22664,"class":"LoopbackAddress"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.997790214Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Certificate"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.997840137Z","hostname":"ip-10-150-1-168","pid":22664,"class":"ConsoleSession"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.99789614Z","hostname":"ip-10-150-1-168","pid":22664,"class":"DeviceAuthRequest"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.997930791Z","hostname":"ip-10-150-1-168","pid":22664,"class":"DeviceAccessToken"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.997963653Z","hostname":"ip-10-150-1-168","pid":22664,"class":"PhysicalDisk"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.997996955Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Rack"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.998029407Z","hostname":"ip-10-150-1-168","pid":22664,"class":"RoleBuiltin"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.998060669Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SshKey"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.998106401Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Silo"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.998139973Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloUser"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.998183705Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SiloGroup"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.998295721Z","hostname":"ip-10-150-1-168","pid":22664,"class":"IdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.999163158Z","hostname":"ip-10-150-1-168","pid":22664,"class":"SamlIdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.99921006Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Sled"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.999248452Z","hostname":"ip-10-150-1-168","pid":22664,"class":"TufRepo"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.999297515Z","hostname":"ip-10-150-1-168","pid":22664,"class":"TufArtifact"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.999335027Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Zpool"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.999372119Z","hostname":"ip-10-150-1-168","pid":22664,"class":"Service"}
{"msg":"registering Oso class","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.999405271Z","hostname":"ip-10-150-1-168","pid":22664,"class":"UserBuiltin"}
{"msg":"full Oso configuration","v":0,"name":"test_insert_running_instance_fails","level":30,"time":"2024-02-14T20:43:13.999435302Z","hostname":"ip-10-150-1-168","pid":22664,"config":"#\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system.  All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n    actor.authenticated and\n    has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - \"create_child\": required to create child resources (of any type)\n#\n# - \"list_children\": required to list child resources (of all types) of a\n#   resource\n#\n# - \"modify\": required to modify or delete a resource\n#\n# - \"read\": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project.  The specific roles\n# are oriented around intended use-cases:\n#\n# - \"admin\": has all permissions on the resource\n#\n# - \"collaborator\": has \"read\", \"list_children\", and \"create_child\", plus\n#   the \"admin\" role for child resources.  The idea is that if you're an\n#   Organization Collaborator, you have full control over the Projects within\n#   the Organization, but you cannot modify or delete the Organization itself.\n#\n# - \"viewer\": has \"read\" and \"list_children\" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level.  For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin           (superuser for the whole system)\n# - fleet.collaborator    (can manage Silos)\n# - fleet.viewer          (can read most non-siloed resources in the system)\n# - silo.admin            (superuser for the silo)\n# - silo.collaborator     (can create and own Organizations)\n# - silo.viewer           (can read most resources within the Silo)\n# - organization.admin    (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer   (can read most resources within the Organization)\n# - project.admin         (complete control over a Project)\n# - project.collaborator  (can manage all resources within the Project)\n# - project.viewer        (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below).  We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# \"Fleet\" is a global singleton representing the whole system.  The name comes\n# from the idea described in RFD 24, but it's not quite right.  This probably\n# should be more like \"Region\" or \"AvailabilityZone\".  The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\troles = [\n\t    # Roles that can be attached by users\n\t    \"admin\",\n\t    \"collaborator\",\n\t    \"viewer\",\n\n\t    # Internal-only roles\n\t    \"external-authenticator\"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Permissions implied by roles on this resource's parent (Fleet).  Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo.  To achieve this, we use permission rules here.  (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"collaborator\" on \"parent_fleet\";\n\n\t# external authenticator has to create silo users\n\t\"list_children\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo.  That's\n# not quite the same as having the \"viewer\" role.  For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using \"POST /organizations\", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404.  This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t\"admin\" if \"collaborator\" on \"parent_silo\";\n\t\"viewer\" if \"viewer\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro.  Some resources require custom Polar code.  Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users.  This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"read\" on \"parent_fleet\";\n\t\"read\" if \"read\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n    if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n    if silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { silo_user: SiloUser };\n\n\t\"read\" if \"read\" on \"silo_user\";\n\t\"modify\" if \"modify\" on \"silo_user\";\n}\nhas_relation(user: SiloUser, \"silo_user\", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database.  These are used either at the top level\n# of the API path (e.g., \"/v1/system/ip-pools\") or as an implementation detail of the system\n# (in the case of console sessions and \"Database\").  The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet.  None of these resources defines their own roles.\n#\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t# \"external-authenticator\" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos.  These\n\t# operations necessarily need to read and modify DNS configuration.\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"modify\" if \"external-authenticator\" on \"parent_fleet\";\n\t# \"admin\" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t    \"list_children\", # list blueprints\n\t    \"create_child\",  # create blueprint\n\t    \"read\",          # read the current target\n\t    \"modify\",        # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/ip-pools\" in the API\nresource IpPoolList {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list IP Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, \"create_child\", ip_pool: IpPool)\n\tif silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration.  This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on.  This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission.  For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's users.  This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on.  This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission.  For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions.  This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif has_role(actor, \"external-authenticator\", silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with.  Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(_actor: AuthenticatedActor, \"read\", _device_auth: DeviceAuthRequest);\nhas_permission(_actor: AuthenticatedActor, \"modify\", _device_auth: DeviceAuthRequest);\n\nhas_permission(actor: AuthenticatedActor, \"read\", device_token: DeviceAccessToken)\n\tif has_role(actor, \"external-authenticator\", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", identity_provider: IdentityProvider)\n\tif has_role(actor, \"external-authenticator\", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, \"external-authenticator\", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t    # \"query\" is required to perform any query against the database,\n\t    # whether a read or write query.  This is checked when an operation\n\t    # checks out a database connection from the connection pool.\n\t    #\n\t    # Any authenticated user gets this permission.  There's generally\n\t    # some other authz check involved in the database query.  For\n\t    # example, if you're querying the database to \"read\" a \"Project\", we\n\t    # should also be checking that.  So why do we do this at all?  It's\n\t    # a belt-and-suspenders measure so that if we somehow introduced an\n\t    # unauthenticated code path that hits the database, it cannot be\n\t    # used to DoS the database because we won't allow the operation to\n\t    # make the query.  (As long as the code path _is_ authenticated, we\n\t    # can use throttling mechanisms to prevent DoS.)\n\t    \"query\",\n\n\t    # \"modify\" is required to populate database data that's delivered\n\t    # with the system.  It should also be required for schema changes,\n\t    # when we support those.  This is separate from \"query\" so that we\n\t    # cannot accidentally invoke these code paths from API calls and\n\t    # other general functions.\n\t    \"modify\"\n\t];\n}\n\n# All authenticated users have the \"query\" permission on the database.\nhas_permission(_actor: AuthenticatedActor, \"query\", _resource: Database);\n\n# The \"db-init\" user is the only one with the \"modify\" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"modify\", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"create_child\", _resource: IpPoolList);\n# It also has \"admin\" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, \"admin\", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, \"admin\", _silo: Silo);\n\n\n\n                resource Disk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Disk)\n                        if child.project = parent;\n            \n\n                resource Snapshot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Snapshot)\n                        if child.project = parent;\n            \n\n                resource ProjectImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: ProjectImage)\n                        if child.project = parent;\n            \n\n                resource Instance {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Instance)\n                        if child.project = parent;\n            \n\n                resource IpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: IpPool)\n                    if child.fleet = fleet;\n            \n\n                resource InstanceNetworkInterface {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Instance\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InstanceNetworkInterface)\n                    if has_relation(project, \"containing_project\", child.instance);\n\n                has_relation(parent: Instance, \"parent\", child: InstanceNetworkInterface)\n                    if child.instance = parent;\n            \n\n                resource Vpc {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Vpc)\n                        if child.project = parent;\n            \n\n                resource VpcRouter {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcRouter)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcRouter)\n                    if child.vpc = parent;\n            \n\n                resource RouterRoute {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: VpcRouter\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: RouterRoute)\n                    if has_relation(project, \"containing_project\", child.vpc_router);\n\n                has_relation(parent: VpcRouter, \"parent\", child: RouterRoute)\n                    if child.vpc_router = parent;\n            \n\n                resource VpcSubnet {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcSubnet)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcSubnet)\n                    if child.vpc = parent;\n            \n\n                resource FloatingIp {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: FloatingIp)\n                        if child.project = parent;\n            \n\n                resource Image {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: Image)\n                    if child.silo = parent;\n            \n\n                resource SiloImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: SiloImage)\n                    if child.silo = parent;\n            \n\n                resource AddressLot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: AddressLot)\n                    if child.fleet = fleet;\n            \n\n                resource Blueprint {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Blueprint)\n                    if child.fleet = fleet;\n            \n\n                resource LoopbackAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: LoopbackAddress)\n                    if child.fleet = fleet;\n            \n\n\n                resource ConsoleSession {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: ConsoleSession)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAuthRequest {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAuthRequest)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAccessToken {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAccessToken)\n                    if child.fleet = fleet;\n            \n\n                resource PhysicalDisk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: PhysicalDisk)\n                    if child.fleet = fleet;\n            \n\n                resource Rack {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Rack)\n                    if child.fleet = fleet;\n            \n\n                resource RoleBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: RoleBuiltin)\n                    if child.fleet = fleet;\n            \n\n\n\n\n\n\n\n                resource Sled {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Sled)\n                    if child.fleet = fleet;\n            \n\n                resource TufRepo {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufRepo)\n                    if child.fleet = fleet;\n            \n\n                resource TufArtifact {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufArtifact)\n                    if child.fleet = fleet;\n            \n\n                resource Zpool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Zpool)\n                    if child.fleet = fleet;\n            \n\n                resource Service {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Service)\n                    if child.fleet = fleet;\n            \n\n                resource UserBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: UserBuiltin)\n                    if child.fleet = fleet;\n            "}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.005686269Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.005915371Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000000","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.005975244Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.006039698Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.006514333Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.022939915Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.023046271Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.023107964Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.023632783Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.025171875Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, 001de000-5110-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.027400625Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.027449718Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.02749318Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.027848269Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.042758971Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.042813994Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.043449178Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.078538723Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.078620347Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.079216169Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.080280046Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.080582613Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.080740401Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.081753476Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }, key: 6b6d0403-b33e-474c-bd6d-0002c3362a12, lookup_type: ById(6b6d0403-b33e-474c-bd6d-0002c3362a12) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.082352838Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"6b6d0403-b33e-474c-bd6d-0002c3362a12","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.08239622Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.082423882Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.082463174Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.084084441Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000000","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.084136754Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.084187977Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.084538076Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.096942542Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.097059508Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.097116071Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.097522553Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.099178162Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, 001de000-5110-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.103699465Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }, key: 6b6d0403-b33e-474c-bd6d-0002c3362a12, lookup_type: ById(6b6d0403-b33e-474c-bd6d-0002c3362a12) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.103751157Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }, key: 6b6d0403-b33e-474c-bd6d-0002c3362a12, lookup_type: ById(6b6d0403-b33e-474c-bd6d-0002c3362a12) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.10379457Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"6b6d0403-b33e-474c-bd6d-0002c3362a12","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.103839612Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.103880035Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.104200202Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.106005239Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-5110-4000-8000-000000000000","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.106143146Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.107017593Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.107061726Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.108306652Z","hostname":"ip-10-150-1-168","pid":22664,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.108846581Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.108909365Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.108959007Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.110231956Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, 001de000-5110-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.114867515Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000000, lookup_type: ById(001de000-5110-4000-8000-000000000000) }, key: 6b6d0403-b33e-474c-bd6d-0002c3362a12, lookup_type: ById(6b6d0403-b33e-474c-bd6d-0002c3362a12) }","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.115825276Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.115881409Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.115922221Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_insert_running_instance_fails","level":10,"time":"2024-02-14T20:43:14.186596869Z","hostname":"ip-10-150-1-168","pid":22664,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.186675413Z","hostname":"ip-10-150-1-168","pid":22664,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_insert_running_instance_fails","level":20,"time":"2024-02-14T20:43:14.188756715Z","hostname":"ip-10-150-1-168","pid":22664,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}