| 1 | | [ Dec 13 22:29:22 Enabled. ] |
| 2 | | [ Dec 13 22:29:22 Rereading configuration. ] |
| 3 | | [ Dec 13 22:29:26 Rereading configuration. ] |
| 4 | | [ Dec 13 22:29:38 Executing start method ("ctrun -l child -o noorphan,regent /opt/oxide/omicron-nexus/bin/nexus /var/svc/manifest/site/nexus/config.toml &"). ] |
| 5 | | [ Dec 13 22:29:38 Method "start" exited with status 0. ] |
| 6 | | note: configured to log to "/dev/stdout" |
| 7 | 2024-12-13T22:29:38.746Z | DEBG | nexus: registered DTrace probes
|
| 8 | 2024-12-13T22:29:38.748Z | INFO | nexus: setting up nexus server
file = nexus/src/lib.rs:75
|
| 9 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Action
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 10 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = AnyActor
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 11 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = AuthenticatedActor
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 12 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = BlueprintConfig
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 13 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Database
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 14 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = DnsConfig
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 15 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Fleet
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 16 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Inventory
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 17 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = IpPoolList
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 18 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = ConsoleSessionList
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 19 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = DeviceAuthRequestList
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 20 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = SiloCertificateList
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 21 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = SiloIdentityProviderList
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 22 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = SiloUserList
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 23 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Project
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 24 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Disk
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 25 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Snapshot
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 26 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = ProjectImage
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 27 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Instance
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 28 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = IpPool
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 29 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = InstanceNetworkInterface
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 30 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Vpc
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 31 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = VpcRouter
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 32 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = InternetGateway
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 33 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = InternetGatewayIpPool
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 34 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = InternetGatewayIpAddress
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 35 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = RouterRoute
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 36 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = VpcSubnet
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 37 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = FloatingIp
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 38 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Image
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 39 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = SiloImage
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 40 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = AddressLot
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 41 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Blueprint
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 42 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = LoopbackAddress
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 43 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Certificate
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 44 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = ConsoleSession
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 45 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = DeviceAuthRequest
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 46 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = DeviceAccessToken
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 47 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = PhysicalDisk
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 48 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Rack
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 49 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = RoleBuiltin
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 50 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = SshKey
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 51 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Silo
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 52 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = SiloUser
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 53 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = SiloGroup
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 54 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = IdentityProvider
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 55 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = SamlIdentityProvider
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 56 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Sled
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 57 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = TufRepo
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 58 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = TufArtifact
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 59 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Zpool
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 60 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = Service
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 61 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): registering Oso class
class = UserBuiltin
file = nexus/auth/src/authz/oso_generic.rs:68
|
| 62 | 2024-12-13T22:29:38.757Z | INFO | nexus (ServerContext): full Oso configuration
config = #\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system. All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n actor.authenticated and\n has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - "create_child": required to create child resources (of any type)\n#\n# - "list_children": required to list child resources (of all types) of a\n# resource\n#\n# - "modify": required to modify or delete a resource\n#\n# - "read": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project. The specific roles\n# are oriented around intended use-cases:\n#\n# - "admin": has all permissions on the resource\n#\n# - "collaborator": has "read", "list_children", and "create_child", plus\n# the "admin" role for child resources. The idea is that if you're an\n# Organization Collaborator, you have full control over the Projects within\n# the Organization, but you cannot modify or delete the Organization itself.\n#\n# - "viewer": has "read" and "list_children" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level. For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin (superuser for the whole system)\n# - fleet.collaborator (can manage Silos)\n# - fleet.viewer (can read most non-siloed resources in the system)\n# - silo.admin (superuser for the silo)\n# - silo.collaborator (can create and own Organizations)\n# - silo.viewer (can read most resources within the Silo)\n# - organization.admin (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer (can read most resources within the Organization)\n# - project.admin (complete control over a Project)\n# - project.collaborator (can manage all resources within the Project)\n# - project.viewer (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below). We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# "Fleet" is a global singleton representing the whole system. The name comes\n# from the idea described in RFD 24, but it's not quite right. This probably\n# should be more like "Region" or "AvailabilityZone". The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "read",\n\t "create_child",\n\t];\n\n\troles = [\n\t # Roles that can be attached by users\n\t "admin",\n\t "collaborator",\n\t "viewer",\n\n\t # Internal-only roles\n\t "external-authenticator"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t"viewer" if "collaborator";\n\t"collaborator" if "admin";\n\n\t# Permissions granted directly by roles on this resource\n\t"list_children" if "viewer";\n\t"read" if "viewer";\n\t"create_child" if "collaborator";\n\t"modify" if "admin";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "read",\n\t "create_child",\n\t];\n\troles = [ "admin", "collaborator", "viewer" ];\n\n\t# Roles implied by other roles on this resource\n\t"viewer" if "collaborator";\n\t"collaborator" if "admin";\n\n\t# Permissions granted directly by roles on this resource\n\t"list_children" if "viewer";\n\t"read" if "viewer";\n\n\t"create_child" if "collaborator";\n\t"modify" if "admin";\n\n\t# Permissions implied by roles on this resource's parent (Fleet). Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo. To achieve this, we use permission rules here. (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t"read" if "viewer" on "parent_fleet";\n\t"modify" if "collaborator" on "parent_fleet";\n\n\t# external authenticator has to create silo users\n\t"list_children" if "external-authenticator" on "parent_fleet";\n\t"create_child" if "external-authenticator" on "parent_fleet";\n}\n\nhas_relation(fleet: Fleet, "parent_fleet", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo. That's\n# not quite the same as having the "viewer" role. For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using "POST /organizations", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404. This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, "read", silo: Silo)\n\tif silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "read",\n\t "create_child",\n\t];\n\troles = [ "admin", "collaborator", "viewer" ];\n\n\t# Roles implied by other roles on this resource\n\t"viewer" if "collaborator";\n\t"collaborator" if "admin";\n\n\t# Permissions granted directly by roles on this resource\n\t"list_children" if "viewer";\n\t"read" if "viewer";\n\t"create_child" if "collaborator";\n\t"modify" if "admin";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t"admin" if "collaborator" on "parent_silo";\n\t"viewer" if "viewer" on "parent_silo";\n}\nhas_relation(silo: Silo, "parent_silo", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro. Some resources require custom Polar code. Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ "read", "modify" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t"read" if "admin" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\t"read" if "admin" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "read",\n\t "create_child",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users. This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t"list_children" if "read" on "parent_silo";\n\t"read" if "read" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_silo";\n\t"list_children" if "read" on "parent_fleet";\n\t"read" if "read" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, "read", silo_user: SiloUser)\n if silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "read",\n\t "create_child",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t"list_children" if "read" on "parent_silo";\n\t"read" if "read" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_silo";\n}\nhas_relation(silo: Silo, "parent_silo", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ "read", "modify" ];\n\trelations = { silo_user: SiloUser };\n\n\t"read" if "read" on "silo_user";\n\t"modify" if "modify" on "silo_user";\n}\nhas_relation(user: SiloUser, "silo_user", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t "read",\n\t "modify",\n\t "create_child",\n\t "list_children",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t"read" if "viewer" on "parent_silo";\n\t"list_children" if "viewer" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_silo";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t"read" if "viewer" on "parent_fleet";\n\t"list_children" if "viewer" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t "read",\n\t "modify",\n\t "create_child",\n\t "list_children",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t"read" if "viewer" on "parent_silo";\n\t"list_children" if "viewer" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_silo";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t"read" if "viewer" on "parent_fleet";\n\t"list_children" if "viewer" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database. These are used either at the top level\n# of the API path (e.g., "/v1/system/ip-pools") or as an implementation detail of the system\n# (in the case of console sessions and "Database"). The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet. None of these resources defines their own roles.\n#\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ "read", "modify" ];\n\trelations = { parent_fleet: Fleet };\n\t# "external-authenticator" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos. These\n\t# operations necessarily need to read and modify DNS configuration.\n\t"read" if "external-authenticator" on "parent_fleet";\n\t"modify" if "external-authenticator" on "parent_fleet";\n\t# "admin" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t"read" if "admin" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t "list_children", # list blueprints\n\t "create_child", # create blueprint\n\t "read", # read the current target\n\t "modify", # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t"create_child" if "admin" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n\t"list_children" if "viewer" on "parent_fleet";\n\t"read" if "viewer" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ "read", "modify" ];\n\trelations = { parent_fleet: Fleet };\n\t"read" if "viewer" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing "/v1/system/ip-pools" in the API\nresource IpPoolList {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "create_child",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t"modify" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n\n\t# Fleet Viewers can list IP Pools\n\t"list_children" if "viewer" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, "create_child", ip_pool: IpPool)\n\tif silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ "create_child" ];\n\trelations = { parent_fleet: Fleet };\n\t"create_child" if "external-authenticator" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ "create_child" ];\n\trelations = { parent_fleet: Fleet };\n\t"create_child" if "external-authenticator" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ "list_children", "create_child" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t"list_children" if "admin" on "parent_silo";\n\t"list_children" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ "list_children", "create_child" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t"list_children" if "read" on "parent_silo";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration. This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on. This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission. For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t"create_child" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ "list_children", "create_child" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t"list_children" if "read" on "parent_silo";\n\n\t# Fleet and Silo administrators can manage the Silo's users. This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on. This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission. For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t"create_child" if "admin" on "parent_silo";\n\t"list_children" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions. This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, "read", silo: Silo)\n\tif has_role(actor, "external-authenticator", silo.fleet);\nhas_permission(actor: AuthenticatedActor, "read", user: SiloUser)\n\tif has_role(actor, "external-authenticator", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, "modify", user: SiloUser)\n\tif has_role(actor, "external-authenticator", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, "read", group: SiloGroup)\n\tif has_role(actor, "external-authenticator", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, "modify", group: SiloGroup)\n\tif has_role(actor, "external-authenticator", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, "read", session: ConsoleSession)\n\tif has_role(actor, "external-authenticator", session.fleet);\nhas_permission(actor: AuthenticatedActor, "modify", session: ConsoleSession)\n\tif has_role(actor, "external-authenticator", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with. Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(_actor: AuthenticatedActor, "read", _device_auth: DeviceAuthRequest);\nhas_permission(_actor: AuthenticatedActor, "modify", _device_auth: DeviceAuthRequest);\n\nhas_permission(actor: AuthenticatedActor, "read", device_token: DeviceAccessToken)\n\tif has_role(actor, "external-authenticator", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, "read", identity_provider: IdentityProvider)\n\tif has_role(actor, "external-authenticator", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, "read", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, "external-authenticator", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t # "query" is required to perform any query against the database,\n\t # whether a read or write query. This is checked when an operation\n\t # checks out a database connection from the connection pool.\n\t #\n\t # Any authenticated user gets this permission. There's generally\n\t # some other authz check involved in the database query. For\n\t # example, if you're querying the database to "read" a "Project", we\n\t # should also be checking that. So why do we do this at all? It's\n\t # a belt-and-suspenders measure so that if we somehow introduced an\n\t # unauthenticated code path that hits the database, it cannot be\n\t # used to DoS the database because we won't allow the operation to\n\t # make the query. (As long as the code path _is_ authenticated, we\n\t # can use throttling mechanisms to prevent DoS.)\n\t "query",\n\n\t # "modify" is required to populate database data that's delivered\n\t # with the system. It should also be required for schema changes,\n\t # when we support those. This is separate from "query" so that we\n\t # cannot accidentally invoke these code paths from API calls and\n\t # other general functions.\n\t "modify"\n\t];\n}\n\n# All authenticated users have the "query" permission on the database.\nhas_permission(_actor: AuthenticatedActor, "query", _resource: Database);\n\n# The "db-init" user is the only one with the "modify" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, "modify", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, "create_child", _resource: IpPoolList);\n# It also has "admin" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, "admin", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, "admin", _silo: Silo);\n\n\n\n resource Disk {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: Disk)\n if child.project = parent;\n \n\n resource Snapshot {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: Snapshot)\n if child.project = parent;\n \n\n resource ProjectImage {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: ProjectImage)\n if child.project = parent;\n \n\n resource Instance {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: Instance)\n if child.project = parent;\n \n\n resource IpPool {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: IpPool)\n if child.fleet = fleet;\n \n\n resource InstanceNetworkInterface {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: Instance\n };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: InstanceNetworkInterface)\n if has_relation(project, "containing_project", child.instance);\n\n has_relation(parent: Instance, "parent", child: InstanceNetworkInterface)\n if child.instance = parent;\n \n\n resource Vpc {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: Vpc)\n if child.project = parent;\n \n\n resource VpcRouter {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: Vpc\n };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: VpcRouter)\n if has_relation(project, "containing_project", child.vpc);\n\n has_relation(parent: Vpc, "parent", child: VpcRouter)\n if child.vpc = parent;\n \n\n resource InternetGateway {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: Vpc\n };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: InternetGateway)\n if has_relation(project, "containing_project", child.vpc);\n\n has_relation(parent: Vpc, "parent", child: InternetGateway)\n if child.vpc = parent;\n \n\n resource InternetGatewayIpPool {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: InternetGateway\n };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: InternetGatewayIpPool)\n if has_relation(project, "containing_project", child.internet_gateway);\n\n has_relation(parent: InternetGateway, "parent", child: InternetGatewayIpPool)\n if child.internet_gateway = parent;\n \n\n resource InternetGatewayIpAddress {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: InternetGateway\n };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: InternetGatewayIpAddress)\n if has_relation(project, "containing_project", child.internet_gateway);\n\n has_relation(parent: InternetGateway, "parent", child: InternetGatewayIpAddress)\n if child.internet_gateway = parent;\n \n\n resource RouterRoute {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: VpcRouter\n };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: RouterRoute)\n if has_relation(project, "containing_project", child.vpc_router);\n\n has_relation(parent: VpcRouter, "parent", child: RouterRoute)\n if child.vpc_router = parent;\n \n\n resource VpcSubnet {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: Vpc\n };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: VpcSubnet)\n if has_relation(project, "containing_project", child.vpc);\n\n has_relation(parent: Vpc, "parent", child: VpcSubnet)\n if child.vpc = parent;\n \n\n resource FloatingIp {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: FloatingIp)\n if child.project = parent;\n \n\n resource Image {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_silo: Silo };\n "list_children" if "viewer" on "containing_silo";\n "read" if "viewer" on "containing_silo";\n "modify" if "collaborator" on "containing_silo";\n "create_child" if "collaborator" on "containing_silo";\n }\n\n has_relation(parent: Silo, "containing_silo", child: Image)\n if child.silo = parent;\n \n\n resource SiloImage {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_silo: Silo };\n "list_children" if "viewer" on "containing_silo";\n "read" if "viewer" on "containing_silo";\n "modify" if "collaborator" on "containing_silo";\n "create_child" if "collaborator" on "containing_silo";\n }\n\n has_relation(parent: Silo, "containing_silo", child: SiloImage)\n if child.silo = parent;\n \n\n resource AddressLot {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: AddressLot)\n if child.fleet = fleet;\n \n\n resource Blueprint {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Blueprint)\n if child.fleet = fleet;\n \n\n resource LoopbackAddress {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: LoopbackAddress)\n if child.fleet = fleet;\n \n\n\n resource ConsoleSession {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: ConsoleSession)\n if child.fleet = fleet;\n \n\n resource DeviceAuthRequest {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: DeviceAuthRequest)\n if child.fleet = fleet;\n \n\n resource DeviceAccessToken {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: DeviceAccessToken)\n if child.fleet = fleet;\n \n\n resource PhysicalDisk {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: PhysicalDisk)\n if child.fleet = fleet;\n \n\n resource Rack {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Rack)\n if child.fleet = fleet;\n \n\n resource RoleBuiltin {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: RoleBuiltin)\n if child.fleet = fleet;\n \n\n\n\n\n\n\n\n resource Sled {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Sled)\n if child.fleet = fleet;\n \n\n resource TufRepo {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: TufRepo)\n if child.fleet = fleet;\n \n\n resource TufArtifact {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: TufArtifact)\n if child.fleet = fleet;\n \n\n resource Zpool {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Zpool)\n if child.fleet = fleet;\n \n\n resource Service {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Service)\n if child.fleet = fleet;\n \n\n resource UserBuiltin {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: UserBuiltin)\n if child.fleet = fleet;\n
file = nexus/auth/src/authz/oso_generic.rs:89
|
| 63 | 2024-12-13T22:29:38.773Z | INFO | nexus (ServerContext): Setting up resolver using DNS servers for subnet: Ipv6Subnet { net: Ipv6Net { addr: fd00:1122:3344::, width: 48 } }
file = nexus/src/context.rs:219
|
| 64 | 2024-12-13T22:29:38.776Z | INFO | nexus (DnsResolver): new DNS resolver
addresses = [[fd00:1122:3344:1::1]:53, [fd00:1122:3344:2::1]:53, [fd00:1122:3344:3::1]:53]
file = internal-dns/resolver/src/resolver.rs:111
|
| 65 | 2024-12-13T22:29:38.780Z | INFO | nexus (ServerContext): Setting up qorb database pool from DNS
dns_addrs = [[fd00:1122:3344:1::1]:53, [fd00:1122:3344:2::1]:53, [fd00:1122:3344:3::1]:53]
file = nexus/src/context.rs:275
|
| 66 | 2024-12-13T22:29:38.786Z | DEBG | nexus (ServerContext): registered USDT probes
|
| 67 | 2024-12-13T22:29:39.225Z | INFO | nexus: Database schema version is up to date
desired_version = 116.0.0
file = nexus/db-queries/src/db/datastore/db_metadata.rs:145
found_version = 116.0.0
|
| 68 | 2024-12-13T22:29:39.228Z | DEBG | nexus (DnsResolver): lookup_all_ipv6 srv
dns_name = _dendrite._tcp.control-plane.oxide.internal
response = SrvLookup(Lookup { query: Query { name: Name("_dendrite._tcp.control-plane.oxide.internal"), query_type: SRV, query_class: IN }, records: [Record { name_labels: Name("_dendrite._tcp.control-plane.oxide.internal."), rr_type: SRV, dns_class: IN, ttl: 0, rdata: Some(SRV(SRV { priority: 0, weight: 0, port: 12224, target: Name("dendrite-35eb16d3-adec-4806-a15c-ab7a15d18765.host.control-plane.oxide.internal.") })) }, Record { name_labels: Name("dendrite-35eb16d3-adec-4806-a15c-ab7a15d18765.host.control-plane.oxide.internal."), rr_type: AAAA, dns_class: IN, ttl: 0, rdata: Some(AAAA(AAAA(fd00:1122:3344:101::2))) }], valid_until: Instant { tv_sec: 923, tv_nsec: 408539454 } })
|
| 69 | 2024-12-13T22:29:39.228Z | INFO | nexus (SEC): SEC running
file = /home/build/.cargo/registry/src/index.crates.io-6f17d22bba15001f/steno-0.4.1/src/sec.rs:813
sec_id = b2389da8-cde2-4174-a8e1-a4dabd361b80
|
| 70 | 2024-12-13T22:29:39.229Z | INFO | nexus (Nexus): Determining switch slots managed by switch zones
file = nexus/src/app/mod.rs:1103
|
| 71 | 2024-12-13T22:29:39.286Z | INFO | nexus (Nexus): determining switch slot managed by dendrite zone
file = nexus/src/app/mod.rs:1111
zone_address = fd00:1122:3344:101::2
|
| 72 | 2024-12-13T22:29:39.287Z | DEBG | nexus (MgsClient): client request
body = None
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/local/switch-id
|
| 73 | 2024-12-13T22:29:39.299Z | DEBG | nexus (MgsClient): client response
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/local/switch-id", status: 200, headers: {"content-type": "application/json", "x-request-id": "b9dc8d2f-562f-413a-a909-bb633eff1c41", "content-length": "26", "date": "Fri, 13 Dec 2024 22:29:39 GMT"} })
|
| 74 | 2024-12-13T22:29:39.299Z | INFO | nexus (Nexus): identified switch slot for dendrite zone
file = nexus/src/app/mod.rs:1116
slot = SpIdentifier {\n slot: 0,\n type_: Switch,\n}
zone_address = fd00:1122:3344:101::2
|
| 75 | 2024-12-13T22:29:39.300Z | INFO | nexus (Nexus): completed mapping dendrite zones to switch slots
file = nexus/src/app/mod.rs:1148
mappings = {\n Switch0: fd00:1122:3344:101::2,\n}
|
| 76 | 2024-12-13T22:29:39.332Z | DEBG | nexus (DnsResolver): lookup_all_ipv6 srv
dns_name = _dendrite._tcp.control-plane.oxide.internal
response = SrvLookup(Lookup { query: Query { name: Name("_dendrite._tcp.control-plane.oxide.internal"), query_type: SRV, query_class: IN }, records: [Record { name_labels: Name("_dendrite._tcp.control-plane.oxide.internal."), rr_type: SRV, dns_class: IN, ttl: 0, rdata: Some(SRV(SRV { priority: 0, weight: 0, port: 12224, target: Name("dendrite-35eb16d3-adec-4806-a15c-ab7a15d18765.host.control-plane.oxide.internal.") })) }, Record { name_labels: Name("dendrite-35eb16d3-adec-4806-a15c-ab7a15d18765.host.control-plane.oxide.internal."), rr_type: AAAA, dns_class: IN, ttl: 0, rdata: Some(AAAA(AAAA(fd00:1122:3344:101::2))) }], valid_until: Instant { tv_sec: 923, tv_nsec: 512863779 } })
|
| 77 | 2024-12-13T22:29:39.333Z | INFO | nexus (Nexus): Determining switch slots managed by switch zones
file = nexus/src/app/mod.rs:1103
|
| 78 | 2024-12-13T22:29:39.365Z | INFO | nexus (Nexus): determining switch slot managed by dendrite zone
file = nexus/src/app/mod.rs:1111
zone_address = fd00:1122:3344:101::2
|
| 79 | 2024-12-13T22:29:39.365Z | DEBG | nexus (MgsClient): client request
body = None
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/local/switch-id
|
| 80 | 2024-12-13T22:29:39.365Z | DEBG | nexus (MgsClient): client response
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/local/switch-id", status: 200, headers: {"content-type": "application/json", "x-request-id": "d7ef3331-f5a1-40b2-8392-56afc2238a54", "content-length": "26", "date": "Fri, 13 Dec 2024 22:29:39 GMT"} })
|
| 81 | 2024-12-13T22:29:39.365Z | INFO | nexus (Nexus): identified switch slot for dendrite zone
file = nexus/src/app/mod.rs:1116
slot = SpIdentifier {\n slot: 0,\n type_: Switch,\n}
zone_address = fd00:1122:3344:101::2
|
| 82 | 2024-12-13T22:29:39.365Z | INFO | nexus (Nexus): completed mapping dendrite zones to switch slots
file = nexus/src/app/mod.rs:1148
mappings = {\n Switch0: fd00:1122:3344:101::2,\n}
|
| 83 | 2024-12-13T22:29:39.437Z | DEBG | nexus (clickhouse-client): registered USDT probes
id = 90efb549-62d0-4d8f-a863-90210ff5d48c
|
| 84 | 2024-12-13T22:29:39.444Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 85 | 2024-12-13T22:29:39.464Z | DEBG | nexus (DataLoader): authorize result
action = Modify
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 86 | 2024-12-13T22:29:39.464Z | DEBG | nexus (DataLoader): attempting to create built-in users
|
| 87 | 2024-12-13T22:29:39.465Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 88 | 2024-12-13T22:29:39.465Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 89 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /artifacts/{kind}/{name}/{version}
versions = all
|
| 90 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /bgtasks
versions = all
|
| 91 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /bgtasks/activate
versions = all
|
| 92 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /bgtasks/view/{bgtask_name}
versions = all
|
| 93 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /clickhouse/policy
versions = all
|
| 94 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /clickhouse/policy
versions = all
|
| 95 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /crucible/0/upstairs/{upstairs_id}/downstairs/{downstairs_id}/stop-request
versions = all
|
| 96 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /crucible/0/upstairs/{upstairs_id}/downstairs/{downstairs_id}/stopped
versions = all
|
| 97 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /crucible/0/upstairs/{upstairs_id}/repair/{repair_id}/progress
versions = all
|
| 98 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /crucible/0/upstairs/{upstairs_id}/repair-finish
versions = all
|
| 99 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /crucible/0/upstairs/{upstairs_id}/repair-start
versions = all
|
| 100 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /demo-saga
versions = all
|
| 101 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /demo-saga/{demo_saga_id}/complete
versions = all
|
| 102 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /deployment/blueprints/all
versions = all
|
| 103 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = DELETE
path = /deployment/blueprints/all/{blueprint_id}
versions = all
|
| 104 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /deployment/blueprints/all/{blueprint_id}
versions = all
|
| 105 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /deployment/blueprints/import
versions = all
|
| 106 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /deployment/blueprints/regenerate
versions = all
|
| 107 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /deployment/blueprints/target
versions = all
|
| 108 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /deployment/blueprints/target
versions = all
|
| 109 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = PUT
path = /deployment/blueprints/target/enabled
versions = all
|
| 110 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /disk/{disk_id}/remove-read-only-parent
versions = all
|
| 111 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = PUT
path = /disks/{disk_id}
versions = all
|
| 112 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /instances/{instance_id}/migrate
versions = all
|
| 113 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /metrics/collectors
versions = all
|
| 114 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /metrics/collectors/{collector_id}/producers
versions = all
|
| 115 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /metrics/producers
versions = all
|
| 116 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /nat/ipv4/changeset/{from_gen}
versions = all
|
| 117 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /physical-disk/expunge
versions = all
|
| 118 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /probes/{sled}
versions = all
|
| 119 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = PUT
path = /racks/{rack_id}/initialization-complete
versions = all
|
| 120 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /sagas
versions = all
|
| 121 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /sagas/{saga_id}
versions = all
|
| 122 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /sled-agents/{sled_id}
versions = all
|
| 123 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /sled-agents/{sled_id}
versions = all
|
| 124 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /sled-agents/{sled_id}/firewall-rules-update
versions = all
|
| 125 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /sleds/add
versions = all
|
| 126 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /sleds/expunge
versions = all
|
| 127 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
path = /sleds/uninitialized
versions = all
|
| 128 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = PUT
path = /switch/{switch_id}
versions = all
|
| 129 | 2024-12-13T22:29:39.480Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = PUT
path = /vmms/{propolis_id}
versions = all
|
| 130 | 2024-12-13T22:29:39.481Z | DEBG | nexus (dropshot_internal): registered endpoint
local_addr = [fd00:1122:3344:101::a]:12221
method = POST
path = /volume/{volume_id}/remove-read-only-parent
versions = all
|
| 131 | 2024-12-13T22:29:39.481Z | INFO | nexus (dropshot_internal): listening
file = /home/build/.cargo/registry/src/index.crates.io-6f17d22bba15001f/dropshot-0.13.0/src/server.rs:327
local_addr = [fd00:1122:3344:101::a]:12221
|
| 132 | 2024-12-13T22:29:39.481Z | DEBG | nexus (dropshot_internal): successfully registered DTrace USDT probes
local_addr = [fd00:1122:3344:101::a]:12221
|
| 133 | 2024-12-13T22:29:39.481Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 134 | 2024-12-13T22:29:39.481Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 135 | 2024-12-13T22:29:39.631Z | WARN | nexus: Cannot look up rack: Object (of type ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b)) not found: rack
file = nexus/src/app/rack.rs:774
|
| 136 | 2024-12-13T22:29:39.841Z | INFO | nexus (DataLoader): created 0 built-in users
file = nexus/db-queries/src/db/datastore/silo_user.rs:394
|
| 137 | 2024-12-13T22:29:39.841Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 138 | 2024-12-13T22:29:39.843Z | DEBG | nexus (DataLoader): authorize result
action = Modify
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 139 | 2024-12-13T22:29:39.844Z | DEBG | nexus (DataLoader): attempting to create built-in roles
|
| 140 | 2024-12-13T22:29:39.844Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 141 | 2024-12-13T22:29:39.844Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 142 | 2024-12-13T22:29:39.972Z | INFO | nexus (DataLoader): created 10 built-in roles
file = nexus/db-queries/src/db/datastore/role.rs:85
|
| 143 | 2024-12-13T22:29:39.973Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 144 | 2024-12-13T22:29:39.974Z | DEBG | nexus (DataLoader): authorize result
action = Modify
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 145 | 2024-12-13T22:29:39.974Z | DEBG | nexus (DataLoader): attempting to create built-in role assignments
|
| 146 | 2024-12-13T22:29:39.974Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 147 | 2024-12-13T22:29:39.974Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 148 | 2024-12-13T22:29:41.631Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 149 | 2024-12-13T22:29:41.632Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 150 | 2024-12-13T22:29:41.633Z | WARN | nexus: Cannot look up rack: Object (of type ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b)) not found: rack
file = nexus/src/app/rack.rs:774
|
| 151 | 2024-12-13T22:29:42.194Z | INFO | nexus (DataLoader): created 0 built-in role assignments
file = nexus/db-queries/src/db/datastore/role.rs:114
|
| 152 | 2024-12-13T22:29:42.194Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 153 | 2024-12-13T22:29:42.195Z | DEBG | nexus (DataLoader): authorize result
action = Modify
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 154 | 2024-12-13T22:29:42.195Z | DEBG | nexus (DataLoader): attempting to create built-in silos
|
| 155 | 2024-12-13T22:29:42.195Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 156 | 2024-12-13T22:29:42.195Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 157 | 2024-12-13T22:29:43.635Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 158 | 2024-12-13T22:29:43.635Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 159 | 2024-12-13T22:29:43.638Z | WARN | nexus: Cannot look up rack: Object (of type ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b)) not found: rack
file = nexus/src/app/rack.rs:774
|
| 160 | 2024-12-13T22:29:43.925Z | INFO | nexus (DataLoader): created 0 built-in silos
file = nexus/db-queries/src/db/datastore/silo.rs:94
|
| 161 | 2024-12-13T22:29:43.925Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 162 | 2024-12-13T22:29:43.925Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 163 | 2024-12-13T22:29:43.942Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 164 | 2024-12-13T22:29:43.943Z | DEBG | nexus (DataLoader): authorize result
action = Modify
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 165 | 2024-12-13T22:29:43.943Z | DEBG | nexus (DataLoader): attempting to create built-in projects
|
| 166 | 2024-12-13T22:29:43.943Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 167 | 2024-12-13T22:29:43.943Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 168 | 2024-12-13T22:29:43.952Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 169 | 2024-12-13T22:29:43.953Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 170 | 2024-12-13T22:29:43.961Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 171 | 2024-12-13T22:29:43.961Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 172 | 2024-12-13T22:29:44.057Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 173 | 2024-12-13T22:29:44.060Z | DEBG | nexus (DataLoader): authorize result
action = CreateChild
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }
result = Ok(())
|
| 174 | 2024-12-13T22:29:44.060Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 175 | 2024-12-13T22:29:44.061Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 176 | 2024-12-13T22:29:44.063Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 177 | 2024-12-13T22:29:44.063Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 178 | 2024-12-13T22:29:44.065Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 179 | 2024-12-13T22:29:44.068Z | DEBG | nexus (DataLoader): authorize result
action = CreateChild
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }
result = Ok(())
|
| 180 | 2024-12-13T22:29:44.068Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 181 | 2024-12-13T22:29:44.068Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 182 | 2024-12-13T22:29:44.229Z | INFO | nexus (DataLoader): created built-in services project
file = nexus/db-queries/src/db/datastore/project.rs:122
|
| 183 | 2024-12-13T22:29:44.229Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 184 | 2024-12-13T22:29:44.230Z | DEBG | nexus (DataLoader): authorize result
action = Modify
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 185 | 2024-12-13T22:29:44.230Z | DEBG | nexus (DataLoader): attempting to create built-in VPCs
|
| 186 | 2024-12-13T22:29:44.230Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 187 | 2024-12-13T22:29:44.230Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 188 | 2024-12-13T22:29:44.249Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 189 | 2024-12-13T22:29:44.249Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 190 | 2024-12-13T22:29:44.287Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 191 | 2024-12-13T22:29:44.287Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 192 | 2024-12-13T22:29:44.289Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 193 | 2024-12-13T22:29:44.289Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 194 | 2024-12-13T22:29:44.353Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 195 | 2024-12-13T22:29:44.354Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 196 | 2024-12-13T22:29:44.355Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 197 | 2024-12-13T22:29:44.359Z | DEBG | nexus (DataLoader): authorize result
action = CreateChild
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }
result = Ok(())
|
| 198 | 2024-12-13T22:29:44.359Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 199 | 2024-12-13T22:29:44.359Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 200 | 2024-12-13T22:29:44.394Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 201 | 2024-12-13T22:29:44.394Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 202 | 2024-12-13T22:29:44.438Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 203 | 2024-12-13T22:29:44.438Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 204 | 2024-12-13T22:29:44.440Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 205 | 2024-12-13T22:29:44.443Z | DEBG | nexus (DataLoader): authorize result
action = CreateChild
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }
result = Ok(())
|
| 206 | 2024-12-13T22:29:44.443Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 207 | 2024-12-13T22:29:44.443Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 208 | 2024-12-13T22:29:44.535Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 209 | 2024-12-13T22:29:44.535Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 210 | 2024-12-13T22:29:44.537Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 211 | 2024-12-13T22:29:44.537Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 212 | 2024-12-13T22:29:44.539Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 213 | 2024-12-13T22:29:44.539Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 214 | 2024-12-13T22:29:44.541Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 215 | 2024-12-13T22:29:44.544Z | DEBG | nexus (DataLoader): authorize result
action = CreateChild
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName("oxide-services") }
result = Ok(())
|
| 216 | 2024-12-13T22:29:44.544Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 217 | 2024-12-13T22:29:44.544Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 218 | 2024-12-13T22:29:44.610Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 219 | 2024-12-13T22:29:44.610Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 220 | 2024-12-13T22:29:44.613Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 221 | 2024-12-13T22:29:44.613Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 222 | 2024-12-13T22:29:44.615Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 223 | 2024-12-13T22:29:44.616Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 224 | 2024-12-13T22:29:44.621Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 225 | 2024-12-13T22:29:44.621Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 226 | 2024-12-13T22:29:44.623Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 227 | 2024-12-13T22:29:44.626Z | DEBG | nexus (DataLoader): authorize result
action = CreateChild
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName("oxide-services") }
result = Ok(())
|
| 228 | 2024-12-13T22:29:44.626Z | DEBG | nexus (DataLoader): roles
roles = RoleSet { roles: {} }
|
| 229 | 2024-12-13T22:29:44.626Z | DEBG | nexus (DataLoader): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })
resource = Database
result = Ok(())
|
| 230 | 2024-12-13T22:29:44.693Z | ERRO | nexus (DataLoader): gave up trying to populate built-in PopulateBuiltinVpcs
error_message = InternalError { internal_message: "Unknown diesel error creating VpcRouter called \\"system\\": Record not found" }
file = nexus/src/populate.rs:126
|
| 231 | 2024-12-13T22:29:44.693Z | ERRO | nexus: populate failed
file = nexus/src/app/mod.rs:530
|
| 232 | 2024-12-13T22:29:44.693Z | INFO | nexus: activating background tasks
file = nexus/src/app/mod.rs:536
|
| 233 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = dns_servers_internal
dns_group = internal
iteration = 1
reason = Timeout
|
| 234 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = phantom_disks
iteration = 1
reason = Timeout
|
| 235 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = instance_reincarnation
iteration = 1
reason = Timeout
|
| 236 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = nat_v4_garbage_collector
iteration = 1
reason = Timeout
|
| 237 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = dns_propagation_internal
dns_group = internal
iteration = 1
reason = Timeout
|
| 238 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = service_firewall_rule_propagation
iteration = 1
reason = Timeout
|
| 239 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = region_replacement_driver
iteration = 1
reason = Timeout
|
| 240 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = external_endpoints
iteration = 1
reason = Timeout
|
| 241 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = blueprint_loader
iteration = 1
reason = Timeout
|
| 242 | 2024-12-13T22:29:44.699Z | WARN | nexus (BackgroundTasks): DNS propagation: skipped
background_task = dns_propagation_internal
dns_group = internal
file = nexus/src/app/background/tasks/dns_propagation.rs:61
reason = no config nor servers
|
| 243 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = switch_port_config_manager
iteration = 1
reason = Timeout
|
| 244 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = decommissioned_disk_cleaner
iteration = 1
reason = Timeout
|
| 245 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = service_zone_nat_tracker
iteration = 1
reason = Timeout
|
| 246 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = bfd_manager
iteration = 1
reason = Timeout
|
| 247 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): roles
background_task = blueprint_loader
roles = RoleSet { roles: {} }
|
| 248 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = v2p_manager
iteration = 1
reason = Timeout
|
| 249 | 2024-12-13T22:29:44.699Z | INFO | nexus (BackgroundTasks): Decommissioned disk cleaner running
background_task = decommissioned_disk_cleaner
file = nexus/src/app/background/tasks/decommissioned_disk_cleaner.rs:56
|
| 250 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = region_replacement
iteration = 1
reason = Timeout
|
| 251 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = vpc_route_manager
iteration = 1
reason = Timeout
|
| 252 | 2024-12-13T22:29:44.699Z | DEBG | nexus (BackgroundTasks): activating
background_task = dns_propagation_external
dns_group = external
iteration = 1
reason = Timeout
|
| 253 | 2024-12-13T22:29:44.699Z | DEBG | nexus (service-firewall-rule-progator): starting background task for service firewall rule propagation
background_task = service_firewall_rule_propagation
|
| 254 | 2024-12-13T22:29:44.700Z | DEBG | nexus (BackgroundTasks): roles
background_task = nat_v4_garbage_collector
roles = RoleSet { roles: {} }
|
| 255 | 2024-12-13T22:29:44.700Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 256 | 2024-12-13T22:29:44.701Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = nat_v4_garbage_collector
resource = Database
result = Ok(())
|
| 257 | 2024-12-13T22:29:44.701Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = dns_propagation_internal
dns_group = internal
elapsed = 1.690597ms
iteration = 1
status = {"error":"no config nor servers"}
|
| 258 | 2024-12-13T22:29:44.701Z | WARN | nexus (BackgroundTasks): DNS propagation: skipped
background_task = dns_propagation_external
dns_group = external
file = nexus/src/app/background/tasks/dns_propagation.rs:61
reason = no config nor servers
|
| 259 | 2024-12-13T22:29:44.701Z | DEBG | nexus (BackgroundTasks): activating
background_task = crdb_node_id_collector
iteration = 1
reason = Timeout
|
| 260 | 2024-12-13T22:29:44.701Z | DEBG | nexus (BackgroundTasks): activating
background_task = inventory_collection
iteration = 1
reason = Timeout
|
| 261 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_replacement_driver
roles = RoleSet { roles: {} }
|
| 262 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = v2p_manager
roles = RoleSet { roles: {} }
|
| 263 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = bfd_manager
roles = RoleSet { roles: {} }
|
| 264 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = instance_reincarnation
roles = RoleSet { roles: {} }
|
| 265 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_zone_nat_tracker
roles = RoleSet { roles: {} }
|
| 266 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {} }
|
| 267 | 2024-12-13T22:29:44.702Z | WARN | nexus (BackgroundTasks): Blueprint execution: skipped
background_task = crdb_node_id_collector
file = nexus/src/app/background/tasks/crdb_node_id_collector.rs:78
reason = no blueprint
|
| 268 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = crdb_node_id_collector
elapsed = 2.895361ms
iteration = 1
status = {"error":"no blueprint"}
|
| 269 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_replacement
roles = RoleSet { roles: {} }
|
| 270 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activating
background_task = region_snapshot_replacement_start
iteration = 1
reason = Timeout
|
| 271 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = switch_port_config_manager
roles = RoleSet { roles: {} }
|
| 272 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activating
background_task = lookup_region_port
iteration = 1
reason = Timeout
|
| 273 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activating
background_task = region_snapshot_replacement_step
iteration = 1
reason = Timeout
|
| 274 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activating
background_task = region_snapshot_replacement_finish
iteration = 1
reason = Timeout
|
| 275 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activating
background_task = region_snapshot_replacement_garbage_collection
iteration = 1
reason = Timeout
|
| 276 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activating
background_task = abandoned_vmm_reaper
iteration = 1
reason = Timeout
|
| 277 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activating
background_task = blueprint_executor
iteration = 1
reason = Timeout
|
| 278 | 2024-12-13T22:29:44.702Z | WARN | nexus (BackgroundTasks): Blueprint execution: skipped
background_task = blueprint_executor
file = nexus/src/app/background/tasks/blueprint_execution.rs:74
reason = no blueprint
|
| 279 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = blueprint_executor
elapsed = 2.997034ms
iteration = 1
status = {"error":"no blueprint"}
|
| 280 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activating
background_task = metrics_producer_gc
iteration = 1
reason = Timeout
|
| 281 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activating
background_task = dns_config_internal
dns_group = internal
iteration = 1
reason = Timeout
|
| 282 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_snapshot_replacement_finish
roles = RoleSet { roles: {} }
|
| 283 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activating
background_task = instance_updater
iteration = 1
reason = Timeout
|
| 284 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = dns_propagation_external
dns_group = external
elapsed = 3.242841ms
iteration = 1
status = {"error":"no config nor servers"}
|
| 285 | 2024-12-13T22:29:44.702Z | INFO | nexus (BackgroundTasks): Metric producer GC running
background_task = metrics_producer_gc
expiration = 2024-12-13 22:19:44.702583714 UTC
file = nexus/src/app/background/tasks/metrics_producer_gc.rs:48
|
| 286 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = external_endpoints
roles = RoleSet { roles: {} }
|
| 287 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = metrics_producer_gc
roles = RoleSet { roles: {} }
|
| 288 | 2024-12-13T22:29:44.702Z | DEBG | nexus (BackgroundTasks): roles
background_task = decommissioned_disk_cleaner
roles = RoleSet { roles: {} }
|
| 289 | 2024-12-13T22:29:44.703Z | DEBG | nexus (DnsResolver): lookup_all_socket_v6 srv
dns_name = _nameservice._tcp.control-plane.oxide.internal
response = SrvLookup(Lookup { query: Query { name: Name("_nameservice._tcp.control-plane.oxide.internal"), query_type: SRV, query_class: IN }, records: [Record { name_labels: Name("_nameservice._tcp.control-plane.oxide.internal."), rr_type: SRV, dns_class: IN, ttl: 0, rdata: Some(SRV(SRV { priority: 0, weight: 0, port: 5353, target: Name("2bddd59f-8fa2-4b3b-ae1a-b309cf00641b.host.control-plane.oxide.internal.") })) }, Record { name_labels: Name("_nameservice._tcp.control-plane.oxide.internal."), rr_type: SRV, dns_class: IN, ttl: 0, rdata: Some(SRV(SRV { priority: 0, weight: 0, port: 5353, target: Name("395a4d9e-1527-4351-8190-c1cd55768e7c.host.control-plane.oxide.internal.") })) }, Record { name_labels: Name("_nameservice._tcp.control-plane.oxide.internal."), rr_type: SRV, dns_class: IN, ttl: 0, rdata: Some(SRV(SRV { priority: 0, weight: 0, port: 5353, target: Name("b14af4bc-de06-49b6-a6f5-2ef07a34b0dc.host.control-plane.oxide.internal.") })) }, Record { name_labels: Name("b14af4bc-de06-49b6-a6f5-2ef07a34b0dc.host.control-plane.oxide.internal."), rr_type: AAAA, dns_class: IN, ttl: 0, rdata: Some(AAAA(AAAA(fd00:1122:3344:3::1))) }], valid_until: Instant { tv_sec: 928, tv_nsec: 881865623 } })
|
| 290 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): activating
background_task = physical_disk_adoption
iteration = 1
reason = Timeout
|
| 291 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): activating
background_task = dns_servers_external
dns_group = external
iteration = 1
reason = Timeout
|
| 292 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): activating
background_task = dns_config_external
dns_group = external
iteration = 1
reason = Timeout
|
| 293 | 2024-12-13T22:29:44.703Z | INFO | nexus (BackgroundTasks): VPC route manager running
background_task = vpc_route_manager
file = nexus/src/app/background/tasks/vpc_routes.rs:60
|
| 294 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): reading DNS version
background_task = dns_config_external
dns_group = external
|
| 295 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): roles
background_task = dns_config_external
dns_group = external
roles = RoleSet { roles: {} }
|
| 296 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): looking for instances with destroyed active VMMs...
background_task = instance_updater
|
| 297 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): roles
background_task = physical_disk_adoption
roles = RoleSet { roles: {} }
|
| 298 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): roles
background_task = instance_updater
roles = RoleSet { roles: {} }
|
| 299 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): roles
background_task = vpc_route_manager
roles = RoleSet { roles: {} }
|
| 300 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_snapshot_replacement_start
roles = RoleSet { roles: {} }
|
| 301 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): roles
background_task = abandoned_vmm_reaper
roles = RoleSet { roles: {} }
|
| 302 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_snapshot_replacement_garbage_collection
roles = RoleSet { roles: {} }
|
| 303 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): activating
background_task = saga_recovery
iteration = 1
reason = Timeout
|
| 304 | 2024-12-13T22:29:44.703Z | DEBG | nexus (SagaRecoverer): listing candidate sagas for recovery
|
| 305 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_replacement_driver
resource = Database
result = Ok(())
|
| 306 | 2024-12-13T22:29:44.703Z | DEBG | nexus (SagaRecoverer): roles
roles = RoleSet { roles: {} }
|
| 307 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): reading DNS version
background_task = dns_config_internal
dns_group = internal
|
| 308 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_snapshot_replacement_step
roles = RoleSet { roles: {} }
|
| 309 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): roles
background_task = dns_config_internal
dns_group = internal
roles = RoleSet { roles: {} }
|
| 310 | 2024-12-13T22:29:44.703Z | DEBG | nexus (BackgroundTasks): activating
background_task = instance_watcher
iteration = 1
reason = Timeout
|
| 311 | 2024-12-13T22:29:44.704Z | DEBG | nexus (DnsResolver): lookup_all_socket_v6 srv
dns_name = _external-dns._tcp.control-plane.oxide.internal
response = SrvLookup(Lookup { query: Query { name: Name("_external-dns._tcp.control-plane.oxide.internal"), query_type: SRV, query_class: IN }, records: [Record { name_labels: Name("_external-dns._tcp.control-plane.oxide.internal."), rr_type: SRV, dns_class: IN, ttl: 0, rdata: Some(SRV(SRV { priority: 0, weight: 0, port: 5353, target: Name("0ef774ca-06b2-40a8-a632-7304d594c07a.host.control-plane.oxide.internal.") })) }, Record { name_labels: Name("_external-dns._tcp.control-plane.oxide.internal."), rr_type: SRV, dns_class: IN, ttl: 0, rdata: Some(SRV(SRV { priority: 0, weight: 0, port: 5353, target: Name("3e0d656e-3552-43ff-8e95-5ed82471e0ae.host.control-plane.oxide.internal.") })) }, Record { name_labels: Name("3e0d656e-3552-43ff-8e95-5ed82471e0ae.host.control-plane.oxide.internal."), rr_type: AAAA, dns_class: IN, ttl: 0, rdata: Some(AAAA(AAAA(fd00:1122:3344:101::8))) }], valid_until: Instant { tv_sec: 928, tv_nsec: 883451297 } })
|
| 312 | 2024-12-13T22:29:44.704Z | DEBG | nexus (BackgroundTasks): roles
background_task = lookup_region_port
roles = RoleSet { roles: {} }
|
| 313 | 2024-12-13T22:29:44.704Z | DEBG | nexus (BackgroundTasks): roles
background_task = instance_watcher
roles = RoleSet { roles: {} }
|
| 314 | 2024-12-13T22:29:44.704Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = instance_reincarnation
resource = Database
result = Ok(())
|
| 315 | 2024-12-13T22:29:44.705Z | INFO | nexus (BackgroundTasks): found DNS servers (initial)
addresses = DnsServersList { addresses: [[fd00:1122:3344:2::1]:5353, [fd00:1122:3344:1::1]:5353, [fd00:1122:3344:3::1]:5353] }
background_task = dns_servers_internal
dns_group = internal
file = nexus/src/app/background/tasks/dns_servers.rs:113
|
| 316 | 2024-12-13T22:29:44.705Z | INFO | nexus (BackgroundTasks): found DNS servers (initial)
addresses = DnsServersList { addresses: [[fd00:1122:3344:101::9]:5353, [fd00:1122:3344:101::8]:5353] }
background_task = dns_servers_external
dns_group = external
file = nexus/src/app/background/tasks/dns_servers.rs:113
|
| 317 | 2024-12-13T22:29:44.705Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = dns_servers_internal
dns_group = internal
elapsed = 6.726199ms
iteration = 1
status = {"addresses":["[fd00:1122:3344:2::1]:5353","[fd00:1122:3344:1::1]:5353","[fd00:1122:3344:3::1]:5353"]}
|
| 318 | 2024-12-13T22:29:44.705Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = dns_servers_external
dns_group = external
elapsed = 6.440771ms
iteration = 1
status = {"addresses":["[fd00:1122:3344:101::9]:5353","[fd00:1122:3344:101::8]:5353"]}
|
| 319 | 2024-12-13T22:29:44.705Z | DEBG | nexus (BackgroundTasks): activating
background_task = dns_propagation_external
dns_group = external
iteration = 2
reason = Dependency
|
| 320 | 2024-12-13T22:29:44.705Z | WARN | nexus (BackgroundTasks): DNS propagation: skipped
background_task = dns_propagation_external
dns_group = external
file = nexus/src/app/background/tasks/dns_propagation.rs:69
reason = no config
|
| 321 | 2024-12-13T22:29:44.705Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = dns_propagation_external
dns_group = external
elapsed = 7.06\u{b5}s
iteration = 2
status = {"error":"no config"}
|
| 322 | 2024-12-13T22:29:44.705Z | DEBG | nexus (BackgroundTasks): activating
background_task = dns_propagation_internal
dns_group = internal
iteration = 2
reason = Dependency
|
| 323 | 2024-12-13T22:29:44.705Z | WARN | nexus (BackgroundTasks): DNS propagation: skipped
background_task = dns_propagation_internal
dns_group = internal
file = nexus/src/app/background/tasks/dns_propagation.rs:69
reason = no config
|
| 324 | 2024-12-13T22:29:44.705Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = dns_propagation_internal
dns_group = internal
elapsed = 7.651\u{b5}s
iteration = 2
status = {"error":"no config"}
|
| 325 | 2024-12-13T22:29:44.706Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = blueprint_loader
resource = Database
result = Ok(())
|
| 326 | 2024-12-13T22:29:44.707Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 327 | 2024-12-13T22:29:44.707Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = decommissioned_disk_cleaner
resource = Database
result = Ok(())
|
| 328 | 2024-12-13T22:29:44.707Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = dns_config_external
dns_group = external
resource = Database
result = Ok(())
|
| 329 | 2024-12-13T22:29:44.707Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Database
result = Ok(())
|
| 330 | 2024-12-13T22:29:44.707Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = metrics_producer_gc
resource = Database
result = Ok(())
|
| 331 | 2024-12-13T22:29:44.707Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_zone_nat_tracker
resource = Database
result = Ok(())
|
| 332 | 2024-12-13T22:29:44.708Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = external_endpoints
resource = Database
result = Ok(())
|
| 333 | 2024-12-13T22:29:44.708Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = vpc_route_manager
resource = Database
result = Ok(())
|
| 334 | 2024-12-13T22:29:44.708Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = v2p_manager
resource = Database
result = Ok(())
|
| 335 | 2024-12-13T22:29:44.708Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = instance_updater
resource = Database
result = Ok(())
|
| 336 | 2024-12-13T22:29:44.708Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = physical_disk_adoption
resource = Database
result = Ok(())
|
| 337 | 2024-12-13T22:29:44.708Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_snapshot_replacement_start
resource = Database
result = Ok(())
|
| 338 | 2024-12-13T22:29:44.708Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = instance_watcher
resource = Database
result = Ok(())
|
| 339 | 2024-12-13T22:29:44.708Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = bfd_manager
resource = Database
result = Ok(())
|
| 340 | 2024-12-13T22:29:44.709Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = switch_port_config_manager
resource = Database
result = Ok(())
|
| 341 | 2024-12-13T22:29:44.709Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = dns_config_internal
dns_group = internal
resource = Database
result = Ok(())
|
| 342 | 2024-12-13T22:29:44.709Z | DEBG | nexus (SagaRecoverer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000003a8a, .. })
resource = Database
result = Ok(())
|
| 343 | 2024-12-13T22:29:44.709Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = lookup_region_port
resource = Database
result = Ok(())
|
| 344 | 2024-12-13T22:29:44.709Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_snapshot_replacement_step
resource = Database
result = Ok(())
|
| 345 | 2024-12-13T22:29:44.709Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_replacement
resource = Database
result = Ok(())
|
| 346 | 2024-12-13T22:29:44.709Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_snapshot_replacement_garbage_collection
resource = Database
result = Ok(())
|
| 347 | 2024-12-13T22:29:44.709Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = abandoned_vmm_reaper
resource = Database
result = Ok(())
|
| 348 | 2024-12-13T22:29:44.709Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_snapshot_replacement_finish
resource = Database
result = Ok(())
|
| 349 | 2024-12-13T22:29:44.742Z | DEBG | nexus (BackgroundTasks): roles
background_task = blueprint_loader
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 350 | 2024-12-13T22:29:44.743Z | DEBG | nexus (BackgroundTasks): roles
background_task = dns_config_external
dns_group = external
roles = RoleSet { roles: {} }
|
| 351 | 2024-12-13T22:29:44.743Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = dns_config_external
dns_group = external
resource = Database
result = Ok(())
|
| 352 | 2024-12-13T22:29:44.744Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 353 | 2024-12-13T22:29:44.745Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 354 | 2024-12-13T22:29:44.746Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = blueprint_loader
resource = BlueprintConfig
result = Ok(())
|
| 355 | 2024-12-13T22:29:44.746Z | DEBG | nexus (BackgroundTasks): roles
background_task = blueprint_loader
roles = RoleSet { roles: {} }
|
| 356 | 2024-12-13T22:29:44.746Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = blueprint_loader
resource = Database
result = Ok(())
|
| 357 | 2024-12-13T22:29:44.749Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_zone_nat_tracker
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 358 | 2024-12-13T22:29:44.752Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_zone_nat_tracker
resource = Inventory
result = Ok(())
|
| 359 | 2024-12-13T22:29:44.752Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_zone_nat_tracker
roles = RoleSet { roles: {} }
|
| 360 | 2024-12-13T22:29:44.753Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_zone_nat_tracker
resource = Database
result = Ok(())
|
| 361 | 2024-12-13T22:29:44.759Z | DEBG | nexus (BackgroundTasks): roles
background_task = dns_config_internal
dns_group = internal
roles = RoleSet { roles: {} }
|
| 362 | 2024-12-13T22:29:44.760Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = dns_config_internal
dns_group = internal
resource = Database
result = Ok(())
|
| 363 | 2024-12-13T22:29:44.760Z | DEBG | nexus (BackgroundTasks): roles
background_task = switch_port_config_manager
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 364 | 2024-12-13T22:29:44.763Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = switch_port_config_manager
resource = Fleet
result = Ok(())
|
| 365 | 2024-12-13T22:29:44.763Z | DEBG | nexus (BackgroundTasks): roles
background_task = switch_port_config_manager
roles = RoleSet { roles: {} }
|
| 366 | 2024-12-13T22:29:44.763Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = switch_port_config_manager
resource = Database
result = Ok(())
|
| 367 | 2024-12-13T22:29:44.779Z | DEBG | nexus (DnsResolver): lookup_all_ipv6 srv
dns_name = _dendrite._tcp.control-plane.oxide.internal
response = SrvLookup(Lookup { query: Query { name: Name("_dendrite._tcp.control-plane.oxide.internal"), query_type: SRV, query_class: IN }, records: [Record { name_labels: Name("_dendrite._tcp.control-plane.oxide.internal."), rr_type: SRV, dns_class: IN, ttl: 0, rdata: Some(SRV(SRV { priority: 0, weight: 0, port: 12224, target: Name("dendrite-35eb16d3-adec-4806-a15c-ab7a15d18765.host.control-plane.oxide.internal.") })) }, Record { name_labels: Name("dendrite-35eb16d3-adec-4806-a15c-ab7a15d18765.host.control-plane.oxide.internal."), rr_type: AAAA, dns_class: IN, ttl: 0, rdata: Some(AAAA(AAAA(fd00:1122:3344:101::2))) }], valid_until: Instant { tv_sec: 928, tv_nsec: 958460480 } })
|
| 368 | 2024-12-13T22:29:44.779Z | INFO | nexus (BackgroundTasks): Determining switch slots managed by switch zones
background_task = nat_v4_garbage_collector
file = nexus/src/app/mod.rs:1103
|
| 369 | 2024-12-13T22:29:44.803Z | INFO | nexus (BackgroundTasks): Metric producer GC complete (no errors)
background_task = metrics_producer_gc
expiration = 2024-12-13 22:19:44.702583714 UTC
file = nexus/src/app/background/tasks/metrics_producer_gc.rs:69
pruned = {}
|
| 370 | 2024-12-13T22:29:44.803Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = metrics_producer_gc
elapsed = 103.715247ms
iteration = 1
status = {"expiration":"2024-12-13T22:19:44.702583714Z","pruned":[]}
|
| 371 | 2024-12-13T22:29:44.804Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = lookup_region_port
elapsed = 104.800768ms
iteration = 1
status = {"errors":[],"found_port_ok":[]}
|
| 372 | 2024-12-13T22:29:44.816Z | DEBG | nexus (BackgroundTasks): roles
background_task = vpc_route_manager
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 373 | 2024-12-13T22:29:44.819Z | DEBG | nexus (BackgroundTasks): authorize result
action = ListChildren
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = vpc_route_manager
resource = Fleet
result = Ok(())
|
| 374 | 2024-12-13T22:29:44.819Z | DEBG | nexus (BackgroundTasks): roles
background_task = vpc_route_manager
roles = RoleSet { roles: {} }
|
| 375 | 2024-12-13T22:29:44.819Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = vpc_route_manager
resource = Database
result = Ok(())
|
| 376 | 2024-12-13T22:29:44.819Z | DEBG | nexus (BackgroundTasks): roles
background_task = decommissioned_disk_cleaner
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 377 | 2024-12-13T22:29:44.821Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = decommissioned_disk_cleaner
resource = Fleet
result = Ok(())
|
| 378 | 2024-12-13T22:29:44.821Z | DEBG | nexus (BackgroundTasks): roles
background_task = decommissioned_disk_cleaner
roles = RoleSet { roles: {} }
|
| 379 | 2024-12-13T22:29:44.822Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = decommissioned_disk_cleaner
resource = Database
result = Ok(())
|
| 380 | 2024-12-13T22:29:44.824Z | DEBG | nexus (BackgroundTasks): roles
background_task = dns_config_external
dns_group = external
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 381 | 2024-12-13T22:29:44.828Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = dns_config_external
dns_group = external
resource = DnsConfig
result = Ok(())
|
| 382 | 2024-12-13T22:29:44.828Z | DEBG | nexus (BackgroundTasks): roles
background_task = instance_watcher
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 383 | 2024-12-13T22:29:44.830Z | INFO | nexus (BackgroundTasks): determining switch slot managed by dendrite zone
background_task = nat_v4_garbage_collector
file = nexus/src/app/mod.rs:1111
zone_address = fd00:1122:3344:101::2
|
| 384 | 2024-12-13T22:29:44.830Z | DEBG | nexus (MgsClient): client request
background_task = nat_v4_garbage_collector
body = None
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/local/switch-id
|
| 385 | 2024-12-13T22:29:44.830Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = instance_watcher
resource = Fleet
result = Ok(())
|
| 386 | 2024-12-13T22:29:44.830Z | DEBG | nexus (BackgroundTasks): roles
background_task = instance_watcher
roles = RoleSet { roles: {} }
|
| 387 | 2024-12-13T22:29:44.830Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = instance_watcher
resource = Database
result = Ok(())
|
| 388 | 2024-12-13T22:29:44.830Z | DEBG | nexus (MgsClient): client response
background_task = nat_v4_garbage_collector
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/local/switch-id", status: 200, headers: {"content-type": "application/json", "x-request-id": "23da141f-e6e2-4e70-a15e-4efac5f0df4e", "content-length": "26", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 389 | 2024-12-13T22:29:44.832Z | INFO | nexus (BackgroundTasks): identified switch slot for dendrite zone
background_task = nat_v4_garbage_collector
file = nexus/src/app/mod.rs:1116
slot = SpIdentifier {\n slot: 0,\n type_: Switch,\n}
zone_address = fd00:1122:3344:101::2
|
| 390 | 2024-12-13T22:29:44.834Z | INFO | nexus (BackgroundTasks): completed mapping dendrite zones to switch slots
background_task = nat_v4_garbage_collector
file = nexus/src/app/mod.rs:1148
mappings = {\n Switch0: fd00:1122:3344:101::2,\n}
|
| 391 | 2024-12-13T22:29:44.846Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 392 | 2024-12-13T22:29:44.847Z | DEBG | nexus (BackgroundTasks): roles
background_task = physical_disk_adoption
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 393 | 2024-12-13T22:29:44.847Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 394 | 2024-12-13T22:29:44.847Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 395 | 2024-12-13T22:29:44.847Z | DEBG | nexus (BackgroundTasks): roles
background_task = external_endpoints
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 396 | 2024-12-13T22:29:44.850Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = physical_disk_adoption
resource = Fleet
result = Ok(())
|
| 397 | 2024-12-13T22:29:44.850Z | DEBG | nexus (BackgroundTasks): roles
background_task = physical_disk_adoption
roles = RoleSet { roles: {} }
|
| 398 | 2024-12-13T22:29:44.850Z | DEBG | nexus (BackgroundTasks): authorize result
action = ListChildren
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = external_endpoints
resource = Fleet
result = Ok(())
|
| 399 | 2024-12-13T22:29:44.850Z | DEBG | nexus (BackgroundTasks): roles
background_task = external_endpoints
roles = RoleSet { roles: {} }
|
| 400 | 2024-12-13T22:29:44.850Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = physical_disk_adoption
resource = Database
result = Ok(())
|
| 401 | 2024-12-13T22:29:44.850Z | DEBG | nexus (BackgroundTasks): authorize result
action = Modify
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Inventory
result = Ok(())
|
| 402 | 2024-12-13T22:29:44.850Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {} }
|
| 403 | 2024-12-13T22:29:44.850Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = external_endpoints
resource = Database
result = Ok(())
|
| 404 | 2024-12-13T22:29:44.850Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Database
result = Ok(())
|
| 405 | 2024-12-13T22:29:44.853Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = switch_port_config_manager
elapsed = 154.044248ms
iteration = 1
status = {}
|
| 406 | 2024-12-13T22:29:44.853Z | DEBG | nexus (BackgroundTasks): roles
background_task = dns_config_internal
dns_group = internal
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 407 | 2024-12-13T22:29:44.856Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = dns_config_internal
dns_group = internal
resource = DnsConfig
result = Ok(())
|
| 408 | 2024-12-13T22:29:44.858Z | DEBG | nexus (BackgroundTasks): roles
background_task = vpc_route_manager
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 409 | 2024-12-13T22:29:44.859Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = phantom_disks
elapsed = 159.83787ms
iteration = 1
status = {"phantom_disk_deleted_err":0,"phantom_disk_deleted_ok":0}
|
| 410 | 2024-12-13T22:29:44.860Z | DEBG | nexus (BackgroundTasks): authorize result
action = ListChildren
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = vpc_route_manager
resource = Fleet
result = Ok(())
|
| 411 | 2024-12-13T22:29:44.860Z | DEBG | nexus (BackgroundTasks): roles
background_task = vpc_route_manager
roles = RoleSet { roles: {} }
|
| 412 | 2024-12-13T22:29:44.860Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = vpc_route_manager
resource = Database
result = Ok(())
|
| 413 | 2024-12-13T22:29:44.863Z | INFO | nexus (BackgroundTasks): Physical Disk Adoption: Rack not yet initialized
background_task = physical_disk_adoption
file = nexus/src/app/background/tasks/physical_disk_adoption.rs:80
rack_id = 984ee802-6f4e-4d6b-aed6-da91b38cb72b
|
| 414 | 2024-12-13T22:29:44.863Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = physical_disk_adoption
elapsed = 163.793021ms
iteration = 1
status = {"error":"rack not yet initialized: 984ee802-6f4e-4d6b-aed6-da91b38cb72b"}
|
| 415 | 2024-12-13T22:29:44.864Z | INFO | nexus (SagaRecoverer): listed in-progress sagas
count = 0
file = nexus/src/app/background/tasks/saga_recovery.rs:438
|
| 416 | 2024-12-13T22:29:44.865Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = saga_recovery
elapsed = 165.275863ms
iteration = 1
status = {"last_pass":{"Success":{"nfailed":0,"nfound":0,"nrecovered":0,"nremoved":0,"nskipped":0}},"ntotal_failures":0,"ntotal_finished":0,"ntotal_recovered":0,"ntotal_sec_errors_bad_state":0,"ntotal_sec_errors_missing":0,"ntotal_started":0,"recent_failures":[],"recent_recoveries":[]}
|
| 417 | 2024-12-13T22:29:44.869Z | WARN | nexus (BackgroundTasks): failed to read target blueprint
background_task = blueprint_loader
error = Internal Error: no target blueprint set
file = nexus/src/app/background/tasks/blueprint_load.rs:69
|
| 418 | 2024-12-13T22:29:44.869Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = blueprint_loader
elapsed = 169.699427ms
iteration = 1
status = {"error":"failed to read target blueprint: Internal Error: no target blueprint set"}
|
| 419 | 2024-12-13T22:29:44.869Z | DEBG | nexus (DpdClient): client request
background_task = nat_v4_garbage_collector
body = None
method = GET
uri = http://[fd00:1122:3344:101::2]:12224/rpw/nat/ipv4/gen
|
| 420 | 2024-12-13T22:29:44.876Z | DEBG | nexus (DpdClient): client response
background_task = nat_v4_garbage_collector
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12224/rpw/nat/ipv4/gen", status: 200, headers: {"content-type": "application/json", "x-request-id": "98a807d2-21af-4121-82fe-0a123aedab98", "content-length": "1", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 421 | 2024-12-13T22:29:44.877Z | DEBG | nexus (BackgroundTasks): roles
background_task = nat_v4_garbage_collector
roles = RoleSet { roles: {} }
|
| 422 | 2024-12-13T22:29:44.878Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = nat_v4_garbage_collector
resource = Database
result = Ok(())
|
| 423 | 2024-12-13T22:29:44.890Z | DEBG | nexus (BackgroundTasks): roles
background_task = instance_reincarnation
roles = RoleSet { roles: {} }
|
| 424 | 2024-12-13T22:29:44.890Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = instance_reincarnation
resource = Database
result = Ok(())
|
| 425 | 2024-12-13T22:29:44.892Z | DEBG | nexus (DnsResolver): lookup_all_ipv6 srv
dns_name = _dendrite._tcp.control-plane.oxide.internal
response = SrvLookup(Lookup { query: Query { name: Name("_dendrite._tcp.control-plane.oxide.internal"), query_type: SRV, query_class: IN }, records: [Record { name_labels: Name("_dendrite._tcp.control-plane.oxide.internal."), rr_type: SRV, dns_class: IN, ttl: 0, rdata: Some(SRV(SRV { priority: 0, weight: 0, port: 12224, target: Name("dendrite-35eb16d3-adec-4806-a15c-ab7a15d18765.host.control-plane.oxide.internal.") })) }, Record { name_labels: Name("dendrite-35eb16d3-adec-4806-a15c-ab7a15d18765.host.control-plane.oxide.internal."), rr_type: AAAA, dns_class: IN, ttl: 0, rdata: Some(AAAA(AAAA(fd00:1122:3344:101::2))) }], valid_until: Instant { tv_sec: 929, tv_nsec: 71283852 } })
|
| 426 | 2024-12-13T22:29:44.892Z | INFO | nexus (BackgroundTasks): Determining switch slots managed by switch zones
background_task = bfd_manager
file = nexus/src/app/mod.rs:1103
|
| 427 | 2024-12-13T22:29:44.904Z | WARN | nexus (BackgroundTasks): failed to read DNS config
background_task = dns_config_external
dns_group = external
error = Internal Error: expected exactly one latest version for DNS group External, found 0
file = nexus/src/app/background/tasks/dns_config.rs:72
|
| 428 | 2024-12-13T22:29:44.904Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = dns_config_external
dns_group = external
elapsed = 204.851882ms
iteration = 1
status = {"error":"failed to read DNS config: Internal Error: expected exactly one latest version for DNS group External, found 0"}
|
| 429 | 2024-12-13T22:29:44.908Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 430 | 2024-12-13T22:29:44.908Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 431 | 2024-12-13T22:29:44.911Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = region_snapshot_replacement_garbage_collection
elapsed = 212.155237ms
iteration = 1
status = {"errors":[],"garbage_collect_requested":[]}
|
| 432 | 2024-12-13T22:29:44.921Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_snapshot_replacement_step
roles = RoleSet { roles: {} }
|
| 433 | 2024-12-13T22:29:44.921Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_replacement_driver
roles = RoleSet { roles: {} }
|
| 434 | 2024-12-13T22:29:44.921Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_snapshot_replacement_step
resource = Database
result = Ok(())
|
| 435 | 2024-12-13T22:29:44.921Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_replacement_driver
resource = Database
result = Ok(())
|
| 436 | 2024-12-13T22:29:44.923Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = region_replacement_driver
elapsed = 224.220925ms
iteration = 1
status = {"drive_invoked_ok":[],"errors":[],"finish_invoked_ok":[]}
|
| 437 | 2024-12-13T22:29:44.928Z | INFO | nexus (BackgroundTasks): determining switch slot managed by dendrite zone
background_task = bfd_manager
file = nexus/src/app/mod.rs:1111
zone_address = fd00:1122:3344:101::2
|
| 438 | 2024-12-13T22:29:44.928Z | DEBG | nexus (MgsClient): client request
background_task = bfd_manager
body = None
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/local/switch-id
|
| 439 | 2024-12-13T22:29:44.928Z | DEBG | nexus (MgsClient): client response
background_task = bfd_manager
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/local/switch-id", status: 200, headers: {"content-type": "application/json", "x-request-id": "6b1f1588-dabb-4280-b9a4-334239842193", "content-length": "26", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 440 | 2024-12-13T22:29:44.928Z | INFO | nexus (BackgroundTasks): identified switch slot for dendrite zone
background_task = bfd_manager
file = nexus/src/app/mod.rs:1116
slot = SpIdentifier {\n slot: 0,\n type_: Switch,\n}
zone_address = fd00:1122:3344:101::2
|
| 441 | 2024-12-13T22:29:44.929Z | INFO | nexus (BackgroundTasks): completed mapping dendrite zones to switch slots
background_task = bfd_manager
file = nexus/src/app/mod.rs:1148
mappings = {\n Switch0: fd00:1122:3344:101::2,\n}
|
| 442 | 2024-12-13T22:29:44.952Z | DEBG | nexus (BackgroundTasks): Found abandoned VMMs
background_task = abandoned_vmm_reaper
count = 0
total = 0
|
| 443 | 2024-12-13T22:29:44.952Z | INFO | nexus (BackgroundTasks): Abandoned VMMs reaped
background_task = abandoned_vmm_reaper
file = nexus/src/app/background/tasks/abandoned_vmm_reaper.rs:171
sled_reservations_deleted = 0
vmms_already_deleted = 0
vmms_deleted = 0
vmms_found = 0
|
| 444 | 2024-12-13T22:29:44.952Z | INFO | nexus (BackgroundTasks): listed instances with destroyed active VMMs
background_task = instance_updater
count = 0
file = nexus/src/app/background/tasks/instance_updater.rs:59
|
| 445 | 2024-12-13T22:29:44.952Z | DEBG | nexus (BackgroundTasks): looking for instances with failed active VMMs...
background_task = instance_updater
|
| 446 | 2024-12-13T22:29:44.952Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = abandoned_vmm_reaper
elapsed = 252.505918ms
iteration = 1
status = {"errors":[],"sled_reservations_deleted":0,"vmms_already_deleted":0,"vmms_deleted":0,"vmms_found":0}
|
| 447 | 2024-12-13T22:29:44.952Z | DEBG | nexus (BackgroundTasks): roles
background_task = instance_updater
roles = RoleSet { roles: {} }
|
| 448 | 2024-12-13T22:29:44.952Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = instance_updater
resource = Database
result = Ok(())
|
| 449 | 2024-12-13T22:29:44.955Z | WARN | nexus (BackgroundTasks): failed to read DNS config
background_task = dns_config_internal
dns_group = internal
error = Internal Error: expected exactly one latest version for DNS group Internal, found 0
file = nexus/src/app/background/tasks/dns_config.rs:72
|
| 450 | 2024-12-13T22:29:44.955Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = dns_config_internal
dns_group = internal
elapsed = 255.79509ms
iteration = 1
status = {"error":"failed to read DNS config: Internal Error: expected exactly one latest version for DNS group Internal, found 0"}
|
| 451 | 2024-12-13T22:29:44.956Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 452 | 2024-12-13T22:29:44.956Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 453 | 2024-12-13T22:29:44.957Z | WARN | nexus (BackgroundTasks): inventory collection is None
background_task = service_zone_nat_tracker
file = nexus/src/app/background/tasks/sync_service_zone_nat.rs:95
|
| 454 | 2024-12-13T22:29:44.957Z | DEBG | nexus (BackgroundTasks): roles
background_task = external_endpoints
roles = RoleSet { roles: {} }
|
| 455 | 2024-12-13T22:29:44.957Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = service_zone_nat_tracker
elapsed = 257.822227ms
iteration = 1
status = {"error":"inventory collection is None"}
|
| 456 | 2024-12-13T22:29:44.957Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = region_snapshot_replacement_finish
elapsed = 257.676153ms
iteration = 1
status = {"errors":[],"records_set_to_done":[]}
|
| 457 | 2024-12-13T22:29:44.957Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = external_endpoints
resource = Database
result = Ok(())
|
| 458 | 2024-12-13T22:29:44.957Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 459 | 2024-12-13T22:29:44.958Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 460 | 2024-12-13T22:29:44.960Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = nat_v4_garbage_collector
elapsed = 261.038347ms
iteration = 1
status = null
|
| 461 | 2024-12-13T22:29:44.973Z | DEBG | nexus (BackgroundTasks): inventory_prune_one: nothing eligible for removal (too few)
background_task = inventory_collection
candidates = []
|
| 462 | 2024-12-13T22:29:44.973Z | DEBG | nexus (DnsResolver): lookup_all_socket_v6 srv
dns_name = _mgs._tcp.control-plane.oxide.internal
response = SrvLookup(Lookup { query: Query { name: Name("_mgs._tcp.control-plane.oxide.internal"), query_type: SRV, query_class: IN }, records: [Record { name_labels: Name("_mgs._tcp.control-plane.oxide.internal."), rr_type: SRV, dns_class: IN, ttl: 0, rdata: Some(SRV(SRV { priority: 0, weight: 0, port: 12225, target: Name("dendrite-35eb16d3-adec-4806-a15c-ab7a15d18765.host.control-plane.oxide.internal.") })) }, Record { name_labels: Name("dendrite-35eb16d3-adec-4806-a15c-ab7a15d18765.host.control-plane.oxide.internal."), rr_type: AAAA, dns_class: IN, ttl: 0, rdata: Some(AAAA(AAAA(fd00:1122:3344:101::2))) }], valid_until: Instant { tv_sec: 929, tv_nsec: 153031754 } })
|
| 463 | 2024-12-13T22:29:44.975Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_snapshot_replacement_step
roles = RoleSet { roles: {} }
|
| 464 | 2024-12-13T22:29:44.975Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_snapshot_replacement_step
resource = Database
result = Ok(())
|
| 465 | 2024-12-13T22:29:44.979Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_snapshot_replacement_start
roles = RoleSet { roles: {} }
|
| 466 | 2024-12-13T22:29:44.980Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_snapshot_replacement_start
resource = Database
result = Ok(())
|
| 467 | 2024-12-13T22:29:44.980Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = bfd_manager
elapsed = 281.087399ms
iteration = 1
status = {}
|
| 468 | 2024-12-13T22:29:44.982Z | DEBG | nexus (BackgroundTasks): Found zpools on decommissioned disks
background_task = decommissioned_disk_cleaner
count = 0
|
| 469 | 2024-12-13T22:29:44.982Z | INFO | nexus (BackgroundTasks): Cleaned decommissioned zpools
background_task = decommissioned_disk_cleaner
deleted = 0
error_count = 0
file = nexus/src/app/background/tasks/decommissioned_disk_cleaner.rs:140
found = 0
not_ready_to_be_deleted = 0
|
| 470 | 2024-12-13T22:29:44.982Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = decommissioned_disk_cleaner
elapsed = 283.350023ms
iteration = 1
status = {"deleted":0,"error":null,"error_count":0,"found":0,"not_ready_to_be_deleted":0}
|
| 471 | 2024-12-13T22:29:44.985Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_replacement
roles = RoleSet { roles: {} }
|
| 472 | 2024-12-13T22:29:44.985Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_replacement
resource = Database
result = Ok(())
|
| 473 | 2024-12-13T22:29:44.998Z | DEBG | nexus (BackgroundTasks): roles
background_task = external_endpoints
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 474 | 2024-12-13T22:29:45.002Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = external_endpoints
resource = DnsConfig
result = Ok(())
|
| 475 | 2024-12-13T22:29:45.002Z | DEBG | nexus (BackgroundTasks): roles
background_task = external_endpoints
roles = RoleSet { roles: {} }
|
| 476 | 2024-12-13T22:29:45.002Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = external_endpoints
resource = Database
result = Ok(())
|
| 477 | 2024-12-13T22:29:45.013Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 478 | 2024-12-13T22:29:45.016Z | DEBG | nexus (BackgroundTasks): begin collection
background_task = inventory_collection
|
| 479 | 2024-12-13T22:29:45.016Z | DEBG | nexus (BackgroundTasks): begin collection from MGS
background_task = inventory_collection
mgs_url = http://[fd00:1122:3344:101::2]:12225
|
| 480 | 2024-12-13T22:29:45.016Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/ignition
|
| 481 | 2024-12-13T22:29:45.017Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }
result = Ok(())
|
| 482 | 2024-12-13T22:29:45.017Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 483 | 2024-12-13T22:29:45.017Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 484 | 2024-12-13T22:29:45.021Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/ignition", status: 200, headers: {"content-type": "application/json", "x-request-id": "aa45cfaa-2f3d-4068-93ca-ef35eee081c4", "content-length": "476", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 485 | 2024-12-13T22:29:45.024Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0
|
| 486 | 2024-12-13T22:29:45.025Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0", status: 200, headers: {"content-type": "application/json", "x-request-id": "247449b9-ec51-4560-9253-6d4ced9f3e26", "content-length": "734", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 487 | 2024-12-13T22:29:45.027Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/sp/caboose?firmware_slot=0
|
| 488 | 2024-12-13T22:29:45.030Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/sp/caboose?firmware_slot=0", status: 200, headers: {"content-type": "application/json", "x-request-id": "de935bd0-f97e-4015-89bc-dc2e945bbd79", "content-length": "111", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 489 | 2024-12-13T22:29:45.031Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/sp/caboose?firmware_slot=1
|
| 490 | 2024-12-13T22:29:45.031Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/sp/caboose?firmware_slot=1", status: 200, headers: {"content-type": "application/json", "x-request-id": "5621ed2b-1566-4a18-97ce-8b9108dc05e8", "content-length": "111", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 491 | 2024-12-13T22:29:45.031Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/caboose?firmware_slot=0
|
| 492 | 2024-12-13T22:29:45.032Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/caboose?firmware_slot=0", status: 200, headers: {"content-type": "application/json", "x-request-id": "05db7c57-0fb3-47cf-9dea-710f97bbafeb", "content-length": "167", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 493 | 2024-12-13T22:29:45.032Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/caboose?firmware_slot=1
|
| 494 | 2024-12-13T22:29:45.032Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/caboose?firmware_slot=1", status: 200, headers: {"content-type": "application/json", "x-request-id": "7e899078-e11c-4051-b7f6-a5913d1999e2", "content-length": "167", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 495 | 2024-12-13T22:29:45.032Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/stage0/caboose?firmware_slot=0
|
| 496 | 2024-12-13T22:29:45.033Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/stage0/caboose?firmware_slot=0", status: 200, headers: {"content-type": "application/json", "x-request-id": "5eaa3090-5b4e-47da-8909-252e54a7496e", "content-length": "175", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 497 | 2024-12-13T22:29:45.033Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/stage0/caboose?firmware_slot=1
|
| 498 | 2024-12-13T22:29:45.033Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/stage0/caboose?firmware_slot=1", status: 200, headers: {"content-type": "application/json", "x-request-id": "7e12a36f-7a59-4c4c-b416-30a980f7a8a3", "content-length": "175", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 499 | 2024-12-13T22:29:45.033Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/cmpa
|
| 500 | 2024-12-13T22:29:45.035Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/cmpa", status: 200, headers: {"content-type": "application/json", "x-request-id": "9bb69f47-7545-4653-872b-cb2861f1a317", "content-length": "702", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 501 | 2024-12-13T22:29:45.035Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = Some(Body)
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/cfpa
|
| 502 | 2024-12-13T22:29:45.038Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/cfpa", status: 200, headers: {"content-type": "application/json", "x-request-id": "60c79492-95c3-465c-a0b2-79e319b96299", "content-length": "727", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 503 | 2024-12-13T22:29:45.038Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = Some(Body)
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/cfpa
|
| 504 | 2024-12-13T22:29:45.038Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/cfpa", status: 200, headers: {"content-type": "application/json", "x-request-id": "165f3af5-52a2-4280-9eca-c514f65c6310", "content-length": "729", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 505 | 2024-12-13T22:29:45.038Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = Some(Body)
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/cfpa
|
| 506 | 2024-12-13T22:29:45.038Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/switch/0/component/rot/cfpa", status: 200, headers: {"content-type": "application/json", "x-request-id": "ef7d8abf-df7c-4f0e-8650-68257bfab563", "content-length": "728", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 507 | 2024-12-13T22:29:45.038Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0
|
| 508 | 2024-12-13T22:29:45.038Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0", status: 200, headers: {"content-type": "application/json", "x-request-id": "96f73419-ee21-4385-a9d2-f957d780b3df", "content-length": "722", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 509 | 2024-12-13T22:29:45.038Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/sp/caboose?firmware_slot=0
|
| 510 | 2024-12-13T22:29:45.039Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/sp/caboose?firmware_slot=0", status: 200, headers: {"content-type": "application/json", "x-request-id": "fd29fefd-0315-4014-8060-8a9f806b4aa3", "content-length": "109", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 511 | 2024-12-13T22:29:45.039Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/sp/caboose?firmware_slot=1
|
| 512 | 2024-12-13T22:29:45.039Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/sp/caboose?firmware_slot=1", status: 200, headers: {"content-type": "application/json", "x-request-id": "6fd94816-c4f8-4329-bcaf-6d6ac26e8e23", "content-length": "109", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 513 | 2024-12-13T22:29:45.039Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/caboose?firmware_slot=0
|
| 514 | 2024-12-13T22:29:45.039Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/caboose?firmware_slot=0", status: 200, headers: {"content-type": "application/json", "x-request-id": "d31799c5-8c35-4186-a874-40de423ceb29", "content-length": "169", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 515 | 2024-12-13T22:29:45.039Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/caboose?firmware_slot=1
|
| 516 | 2024-12-13T22:29:45.040Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/caboose?firmware_slot=1", status: 200, headers: {"content-type": "application/json", "x-request-id": "08ef99b9-3c0e-40c3-a8c2-d544cec135b8", "content-length": "169", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 517 | 2024-12-13T22:29:45.040Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/stage0/caboose?firmware_slot=0
|
| 518 | 2024-12-13T22:29:45.040Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/stage0/caboose?firmware_slot=0", status: 200, headers: {"content-type": "application/json", "x-request-id": "1e290019-df00-4e1f-8fc1-ead34b7d4874", "content-length": "178", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 519 | 2024-12-13T22:29:45.040Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/stage0/caboose?firmware_slot=1
|
| 520 | 2024-12-13T22:29:45.040Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/stage0/caboose?firmware_slot=1", status: 200, headers: {"content-type": "application/json", "x-request-id": "f21d4ea2-0d82-4a31-8d57-7d869f8dbc6c", "content-length": "178", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 521 | 2024-12-13T22:29:45.040Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = None
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/cmpa
|
| 522 | 2024-12-13T22:29:45.040Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/cmpa", status: 200, headers: {"content-type": "application/json", "x-request-id": "266a5a94-4709-437c-b593-78b9b5c6d956", "content-length": "702", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 523 | 2024-12-13T22:29:45.040Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = Some(Body)
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/cfpa
|
| 524 | 2024-12-13T22:29:45.041Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/cfpa", status: 200, headers: {"content-type": "application/json", "x-request-id": "4a38a4e9-0d37-474f-b1ee-be6f6fed6cba", "content-length": "727", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 525 | 2024-12-13T22:29:45.041Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = Some(Body)
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/cfpa
|
| 526 | 2024-12-13T22:29:45.041Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/cfpa", status: 200, headers: {"content-type": "application/json", "x-request-id": "eb15e620-9277-4260-8590-0e482a1a6dc9", "content-length": "729", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 527 | 2024-12-13T22:29:45.041Z | DEBG | nexus (BackgroundTasks): client request
background_task = inventory_collection
body = Some(Body)
gateway_url = http://[fd00:1122:3344:101::2]:12225
method = GET
uri = http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/cfpa
|
| 528 | 2024-12-13T22:29:45.041Z | DEBG | nexus (BackgroundTasks): client response
background_task = inventory_collection
gateway_url = http://[fd00:1122:3344:101::2]:12225
result = Ok(Response { url: "http://[fd00:1122:3344:101::2]:12225/sp/sled/0/component/rot/cfpa", status: 200, headers: {"content-type": "application/json", "x-request-id": "8a0eefcc-2e1f-4906-beb0-2adf47569fa1", "content-length": "728", "date": "Fri, 13 Dec 2024 22:29:44 GMT"} })
|
| 529 | 2024-12-13T22:29:45.041Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {} }
|
| 530 | 2024-12-13T22:29:45.041Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Database
result = Ok(())
|
| 531 | 2024-12-13T22:29:45.042Z | INFO | nexus (BackgroundTasks): listed instances with failed active VMMs
background_task = instance_updater
count = 0
file = nexus/src/app/background/tasks/instance_updater.rs:59
|
| 532 | 2024-12-13T22:29:45.042Z | DEBG | nexus (BackgroundTasks): looking for instances with terminated active migrations...
background_task = instance_updater
|
| 533 | 2024-12-13T22:29:45.042Z | DEBG | nexus (BackgroundTasks): roles
background_task = instance_updater
roles = RoleSet { roles: {} }
|
| 534 | 2024-12-13T22:29:45.042Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = instance_updater
resource = Database
result = Ok(())
|
| 535 | 2024-12-13T22:29:45.043Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 536 | 2024-12-13T22:29:45.045Z | DEBG | nexus (BackgroundTasks): authorize result
action = ListChildren
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Fleet
result = Ok(())
|
| 537 | 2024-12-13T22:29:45.045Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {} }
|
| 538 | 2024-12-13T22:29:45.045Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Database
result = Ok(())
|
| 539 | 2024-12-13T22:29:45.046Z | WARN | nexus (BackgroundTasks): instance reincarnation completed with errors
background_task = instance_reincarnation
file = nexus/src/app/background/tasks/instance_reincarnation.rs:103
instances_changed_state = 0
instances_found = 0
instances_reincarnated = 0
query_errors = 0
restart_errors = 0
|
| 540 | 2024-12-13T22:29:45.046Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = instance_reincarnation
elapsed = 346.890803ms
iteration = 1
status = {"changed_state":[],"disabled":false,"errors":[],"instances_found":{"Failed":0,"SagaUnwound":0},"instances_reincarnated":[],"restart_errors":[]}
|
| 541 | 2024-12-13T22:29:45.047Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 542 | 2024-12-13T22:29:45.049Z | DEBG | nexus (BackgroundTasks): authorize result
action = ListChildren
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Fleet
result = Ok(())
|
| 543 | 2024-12-13T22:29:45.049Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {} }
|
| 544 | 2024-12-13T22:29:45.049Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Database
result = Ok(())
|
| 545 | 2024-12-13T22:29:45.053Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = region_snapshot_replacement_step
elapsed = 353.605822ms
iteration = 1
status = {"errors":[],"step_garbage_collect_invoked_ok":[],"step_invoked_ok":[],"step_records_created_ok":[]}
|
| 546 | 2024-12-13T22:29:45.057Z | INFO | nexus (BackgroundTasks): all instance checks complete
background_task = instance_watcher
file = nexus/src/app/background/tasks/instance_watcher.rs:555
pruned_instances = 0
total_completed = 0
total_failed = 0
total_incomplete = 0
total_instances = 0
update_sagas_queued = 0
|
| 547 | 2024-12-13T22:29:45.057Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = instance_watcher
elapsed = 357.983985ms
iteration = 1
status = {"failed_checks":{},"incomplete_checks":{},"instance_states":{},"pruned_instances":0,"total_instances":0,"update_sagas_queued":0}
|
| 548 | 2024-12-13T22:29:45.068Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 549 | 2024-12-13T22:29:45.069Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = region_replacement
elapsed = 369.408995ms
iteration = 1
status = {"errors":[],"requests_completed_ok":[],"requests_created_ok":[],"start_invoked_ok":[]}
|
| 550 | 2024-12-13T22:29:45.069Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 551 | 2024-12-13T22:29:45.069Z | WARN | nexus (BackgroundTasks): failed to read Silo/DNS/TLS configuration
background_task = external_endpoints
error = Internal Error: expected at least one external DNS zone
file = nexus/src/app/background/tasks/external_endpoints.rs:48
|
| 552 | 2024-12-13T22:29:45.069Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = external_endpoints
elapsed = 369.96648ms
iteration = 1
status = {"error":"failed to read Silo/DNS/TLS configuration: Internal Error: expected at least one external DNS zone"}
|
| 553 | 2024-12-13T22:29:45.069Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = region_snapshot_replacement_start
elapsed = 369.95778ms
iteration = 1
status = {"errors":[],"requests_created_ok":[],"start_invoked_ok":[]}
|
| 554 | 2024-12-13T22:29:45.070Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 555 | 2024-12-13T22:29:45.070Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 556 | 2024-12-13T22:29:45.071Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 557 | 2024-12-13T22:29:45.075Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }
result = Ok(())
|
| 558 | 2024-12-13T22:29:45.075Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 559 | 2024-12-13T22:29:45.075Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 560 | 2024-12-13T22:29:45.076Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = vpc_route_manager
elapsed = 376.941676ms
iteration = 1
status = {}
|
| 561 | 2024-12-13T22:29:45.091Z | DEBG | nexus (BackgroundTasks): roles
background_task = v2p_manager
roles = RoleSet { roles: {} }
|
| 562 | 2024-12-13T22:29:45.092Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = v2p_manager
resource = Database
result = Ok(())
|
| 563 | 2024-12-13T22:29:45.124Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 564 | 2024-12-13T22:29:45.124Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 565 | 2024-12-13T22:29:45.164Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 566 | 2024-12-13T22:29:45.164Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 567 | 2024-12-13T22:29:45.166Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 568 | 2024-12-13T22:29:45.166Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 569 | 2024-12-13T22:29:45.167Z | INFO | nexus (BackgroundTasks): listed instances with terminated active migrations
background_task = instance_updater
count = 0
file = nexus/src/app/background/tasks/instance_updater.rs:59
|
| 570 | 2024-12-13T22:29:45.167Z | INFO | nexus (BackgroundTasks): instance updater activation completed
background_task = instance_updater
destroyed_active_vmms = 0
failed_active_vmms = 0
file = nexus/src/app/background/tasks/instance_updater.rs:225
terminated_active_migrations = 0
update_sagas_completed = 0
update_sagas_started = 0
|
| 571 | 2024-12-13T22:29:45.167Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = instance_updater
elapsed = 467.443822ms
iteration = 1
status = {"destroyed_active_vmms":0,"disabled":false,"failed_active_vmms":0,"query_errors":[],"saga_errors":[],"sagas_completed":0,"sagas_started":0,"terminated_active_migrations":0}
|
| 572 | 2024-12-13T22:29:45.167Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 573 | 2024-12-13T22:29:45.168Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 574 | 2024-12-13T22:29:45.169Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 575 | 2024-12-13T22:29:45.169Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 576 | 2024-12-13T22:29:45.172Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 577 | 2024-12-13T22:29:45.172Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 578 | 2024-12-13T22:29:45.173Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 579 | 2024-12-13T22:29:45.177Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }
result = Ok(())
|
| 580 | 2024-12-13T22:29:45.182Z | DEBG | nexus (BackgroundTasks): begin collecting all keepers
background_task = inventory_collection
nkeeper_admin_clients = 0
|
| 581 | 2024-12-13T22:29:45.182Z | DEBG | nexus (BackgroundTasks): end collecting all keepers
background_task = inventory_collection
nkeeper_admin_clients = 0
|
| 582 | 2024-12-13T22:29:45.182Z | DEBG | nexus (BackgroundTasks): finished collection
background_task = inventory_collection
|
| 583 | 2024-12-13T22:29:45.183Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {} }
|
| 584 | 2024-12-13T22:29:45.184Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Database
result = Ok(())
|
| 585 | 2024-12-13T22:29:45.185Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 586 | 2024-12-13T22:29:45.187Z | DEBG | nexus (BackgroundTasks): authorize result
action = Modify
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Inventory
result = Ok(())
|
| 587 | 2024-12-13T22:29:45.187Z | DEBG | nexus (BackgroundTasks): roles
background_task = inventory_collection
roles = RoleSet { roles: {} }
|
| 588 | 2024-12-13T22:29:45.187Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = inventory_collection
resource = Database
result = Ok(())
|
| 589 | 2024-12-13T22:29:45.195Z | DEBG | nexus (service-firewall-rule-progator): resolved names for firewall rules
background_task = service_firewall_rule_propagation
instance_interfaces = {}
subnet_interfaces = {}
subnet_networks = {}
vpc_interfaces = {}
|
| 590 | 2024-12-13T22:29:45.195Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 591 | 2024-12-13T22:29:45.196Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 592 | 2024-12-13T22:29:45.200Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 593 | 2024-12-13T22:29:45.202Z | DEBG | nexus (BackgroundTasks): authorize result
action = ListChildren
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Fleet
result = Ok(())
|
| 594 | 2024-12-13T22:29:45.202Z | DEBG | nexus (BackgroundTasks): roles
background_task = service_firewall_rule_propagation
roles = RoleSet { roles: {} }
|
| 595 | 2024-12-13T22:29:45.202Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = service_firewall_rule_propagation
resource = Database
result = Ok(())
|
| 596 | 2024-12-13T22:29:45.223Z | DEBG | nexus (service-firewall-rule-progator): Allowlist for user-facing services is set to allow any inbound traffic. Existing VPC firewall rules will not be modified.
background_task = service_firewall_rule_propagation
|
| 597 | 2024-12-13T22:29:45.223Z | DEBG | nexus (service-firewall-rule-progator): resolved firewall rules for sled agents
background_task = service_firewall_rule_propagation
sled_agent_rules = []
|
| 598 | 2024-12-13T22:29:45.223Z | DEBG | nexus (service-firewall-rule-progator): resolved 0 rules for sleds
background_task = service_firewall_rule_propagation
|
| 599 | 2024-12-13T22:29:45.273Z | DEBG | nexus (BackgroundTasks): roles
background_task = v2p_manager
roles = RoleSet { roles: {} }
|
| 600 | 2024-12-13T22:29:45.273Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = v2p_manager
resource = Database
result = Ok(())
|
| 601 | 2024-12-13T22:29:45.275Z | DEBG | nexus (BackgroundTasks): roles
background_task = v2p_manager
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 602 | 2024-12-13T22:29:45.277Z | DEBG | nexus (BackgroundTasks): authorize result
action = ListChildren
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = v2p_manager
resource = Fleet
result = Ok(())
|
| 603 | 2024-12-13T22:29:45.277Z | DEBG | nexus (BackgroundTasks): roles
background_task = v2p_manager
roles = RoleSet { roles: {} }
|
| 604 | 2024-12-13T22:29:45.277Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = v2p_manager
resource = Database
result = Ok(())
|
| 605 | 2024-12-13T22:29:45.279Z | DEBG | nexus (BackgroundTasks): roles
background_task = v2p_manager
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 606 | 2024-12-13T22:29:45.280Z | DEBG | nexus (BackgroundTasks): authorize result
action = ListChildren
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = v2p_manager
resource = Fleet
result = Ok(())
|
| 607 | 2024-12-13T22:29:45.280Z | DEBG | nexus (BackgroundTasks): roles
background_task = v2p_manager
roles = RoleSet { roles: {} }
|
| 608 | 2024-12-13T22:29:45.280Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = v2p_manager
resource = Database
result = Ok(())
|
| 609 | 2024-12-13T22:29:45.437Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = v2p_manager
elapsed = 737.299167ms
iteration = 1
status = {}
|
| 610 | 2024-12-13T22:29:45.585Z | DEBG | nexus (service-firewall-rule-progator): resolved sleds for vpc oxide-services
background_task = service_firewall_rule_propagation
vpc_to_sled = []
|
| 611 | 2024-12-13T22:29:45.586Z | DEBG | nexus (service-firewall-rule-progator): sending firewall rules to sled agents
background_task = service_firewall_rule_propagation
|
| 612 | 2024-12-13T22:29:45.586Z | INFO | nexus (service-firewall-rule-progator): updated firewall rules on 0 sleds
background_task = service_firewall_rule_propagation
file = nexus/networking/src/firewall_rules.rs:496
|
| 613 | 2024-12-13T22:29:45.586Z | DEBG | nexus (service-firewall-rule-progator): successfully propagated service firewall rules
background_task = service_firewall_rule_propagation
elapsed = 885.352437ms
|
| 614 | 2024-12-13T22:29:45.586Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = service_firewall_rule_propagation
elapsed = 886.17254ms
iteration = 1
status = {}
|
| 615 | 2024-12-13T22:29:45.612Z | INFO | nexus (BackgroundTasks): inserted inventory collection
background_task = inventory_collection
collection_id = 7b53e4fa-6277-4922-bd6f-e769e0fe77dc
file = nexus/db-queries/src/db/datastore/inventory.rs:1010
|
| 616 | 2024-12-13T22:29:45.612Z | DEBG | nexus (BackgroundTasks): inventory collection complete
background_task = inventory_collection
collection_id = 7b53e4fa-6277-4922-bd6f-e769e0fe77dc
time_started = 2024-12-13 22:29:45.015108 UTC
|
| 617 | 2024-12-13T22:29:45.613Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = inventory_collection
elapsed = 912.990632ms
iteration = 1
status = {"collection_id":"7b53e4fa-6277-4922-bd6f-e769e0fe77dc","time_done":"2024-12-13 22:29:45.182855 UTC","time_started":"2024-12-13 22:29:45.015108 UTC"}
|
| 618 | 2024-12-13T22:29:45.613Z | DEBG | nexus (BackgroundTasks): activating
background_task = physical_disk_adoption
iteration = 2
reason = Dependency
|
| 619 | 2024-12-13T22:29:45.613Z | DEBG | nexus (BackgroundTasks): roles
background_task = physical_disk_adoption
roles = RoleSet { roles: {} }
|
| 620 | 2024-12-13T22:29:45.613Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = physical_disk_adoption
resource = Database
result = Ok(())
|
| 621 | 2024-12-13T22:29:45.614Z | DEBG | nexus (BackgroundTasks): roles
background_task = physical_disk_adoption
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 622 | 2024-12-13T22:29:45.616Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = physical_disk_adoption
resource = Fleet
result = Ok(())
|
| 623 | 2024-12-13T22:29:45.616Z | DEBG | nexus (BackgroundTasks): roles
background_task = physical_disk_adoption
roles = RoleSet { roles: {} }
|
| 624 | 2024-12-13T22:29:45.616Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = physical_disk_adoption
resource = Database
result = Ok(())
|
| 625 | 2024-12-13T22:29:45.618Z | INFO | nexus (BackgroundTasks): Physical Disk Adoption: Rack not yet initialized
background_task = physical_disk_adoption
file = nexus/src/app/background/tasks/physical_disk_adoption.rs:80
rack_id = 984ee802-6f4e-4d6b-aed6-da91b38cb72b
|
| 626 | 2024-12-13T22:29:45.619Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = physical_disk_adoption
elapsed = 5.960387ms
iteration = 2
status = {"error":"rack not yet initialized: 984ee802-6f4e-4d6b-aed6-da91b38cb72b"}
|
| 627 | 2024-12-13T22:29:45.640Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 628 | 2024-12-13T22:29:45.640Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 629 | 2024-12-13T22:29:45.642Z | WARN | nexus: Cannot look up rack: Object (of type ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b)) not found: rack
file = nexus/src/app/rack.rs:774
|
| 630 | 2024-12-13T22:29:47.643Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 631 | 2024-12-13T22:29:47.644Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 632 | 2024-12-13T22:29:47.645Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 633 | 2024-12-13T22:29:47.645Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 634 | 2024-12-13T22:29:47.647Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 635 | 2024-12-13T22:29:47.650Z | DEBG | nexus (ServiceBalancer): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Rack { parent: Fleet, key: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, lookup_type: ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b) }
result = Ok(())
|
| 636 | 2024-12-13T22:29:47.650Z | INFO | nexus: Still waiting for rack initialization: Rack { identity: RackIdentity { id: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, time_created: 2024-12-13T22:29:45.792768Z, time_modified: 2024-12-13T22:29:45.792768Z }, initialized: false, tuf_base_url: None, rack_subnet: Some(V6(Ipv6Network { addr: fd00:1122:3344:100::, prefix: 56 })) }
file = nexus/src/app/rack.rs:768
|
| 637 | 2024-12-13T22:29:49.650Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 638 | 2024-12-13T22:29:49.651Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 639 | 2024-12-13T22:29:49.654Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 640 | 2024-12-13T22:29:49.654Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 641 | 2024-12-13T22:29:49.656Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 642 | 2024-12-13T22:29:49.658Z | DEBG | nexus (ServiceBalancer): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Rack { parent: Fleet, key: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, lookup_type: ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b) }
result = Ok(())
|
| 643 | 2024-12-13T22:29:49.658Z | INFO | nexus: Still waiting for rack initialization: Rack { identity: RackIdentity { id: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, time_created: 2024-12-13T22:29:45.792768Z, time_modified: 2024-12-13T22:29:45.792768Z }, initialized: false, tuf_base_url: None, rack_subnet: Some(V6(Ipv6Network { addr: fd00:1122:3344:100::, prefix: 56 })) }
file = nexus/src/app/rack.rs:768
|
| 644 | 2024-12-13T22:29:51.658Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 645 | 2024-12-13T22:29:51.658Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 646 | 2024-12-13T22:29:51.660Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 647 | 2024-12-13T22:29:51.660Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 648 | 2024-12-13T22:29:51.662Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 649 | 2024-12-13T22:29:51.664Z | DEBG | nexus (ServiceBalancer): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Rack { parent: Fleet, key: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, lookup_type: ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b) }
result = Ok(())
|
| 650 | 2024-12-13T22:29:51.664Z | INFO | nexus: Still waiting for rack initialization: Rack { identity: RackIdentity { id: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, time_created: 2024-12-13T22:29:45.792768Z, time_modified: 2024-12-13T22:29:45.792768Z }, initialized: false, tuf_base_url: None, rack_subnet: Some(V6(Ipv6Network { addr: fd00:1122:3344:100::, prefix: 56 })) }
file = nexus/src/app/rack.rs:768
|
| 651 | 2024-12-13T22:29:53.186Z | INFO | nexus (dropshot_internal): accepted connection
file = /home/build/.cargo/registry/src/index.crates.io-6f17d22bba15001f/dropshot-0.13.0/src/server.rs:1023
local_addr = [fd00:1122:3344:101::a]:12221
remote_addr = [fd00:1122:3344:101::d]:57747
|
| 652 | 2024-12-13T22:29:53.198Z | DEBG | nexus (dropshot_internal): roles
actor_id = 001de000-05e4-4000-8000-000000000002
authenticated = true
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
remote_addr = [fd00:1122:3344:101::d]:57747
req_id = 5c4857df-b962-498d-a17e-8b177bf2d0b9
roles = RoleSet { roles: {} }
uri = /metrics/collectors/689eb899-96a8-4e42-a5ca-864d1c68fdc9/producers?sort_by=id_ascending
|
| 653 | 2024-12-13T22:29:53.198Z | DEBG | nexus (dropshot_internal): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
actor_id = 001de000-05e4-4000-8000-000000000002
authenticated = true
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
remote_addr = [fd00:1122:3344:101::d]:57747
req_id = 5c4857df-b962-498d-a17e-8b177bf2d0b9
resource = Database
result = Ok(())
uri = /metrics/collectors/689eb899-96a8-4e42-a5ca-864d1c68fdc9/producers?sort_by=id_ascending
|
| 654 | 2024-12-13T22:29:53.222Z | INFO | nexus (dropshot_internal): request completed
file = /home/build/.cargo/registry/src/index.crates.io-6f17d22bba15001f/dropshot-0.13.0/src/server.rs:863
latency_us = 34401
local_addr = [fd00:1122:3344:101::a]:12221
method = GET
remote_addr = [fd00:1122:3344:101::d]:57747
req_id = 5c4857df-b962-498d-a17e-8b177bf2d0b9
response_code = 200
uri = /metrics/collectors/689eb899-96a8-4e42-a5ca-864d1c68fdc9/producers?sort_by=id_ascending
|
| 655 | 2024-12-13T22:29:53.665Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 656 | 2024-12-13T22:29:53.665Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 657 | 2024-12-13T22:29:53.667Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 658 | 2024-12-13T22:29:53.667Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 659 | 2024-12-13T22:29:53.669Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 660 | 2024-12-13T22:29:53.672Z | DEBG | nexus (ServiceBalancer): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Rack { parent: Fleet, key: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, lookup_type: ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b) }
result = Ok(())
|
| 661 | 2024-12-13T22:29:53.672Z | INFO | nexus: Still waiting for rack initialization: Rack { identity: RackIdentity { id: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, time_created: 2024-12-13T22:29:45.792768Z, time_modified: 2024-12-13T22:29:45.792768Z }, initialized: false, tuf_base_url: None, rack_subnet: Some(V6(Ipv6Network { addr: fd00:1122:3344:100::, prefix: 56 })) }
file = nexus/src/app/rack.rs:768
|
| 662 | 2024-12-13T22:29:54.698Z | DEBG | nexus (BackgroundTasks): activating
background_task = blueprint_loader
iteration = 2
reason = Timeout
|
| 663 | 2024-12-13T22:29:54.698Z | DEBG | nexus (BackgroundTasks): activating
background_task = region_replacement_driver
iteration = 2
reason = Timeout
|
| 664 | 2024-12-13T22:29:54.698Z | DEBG | nexus (BackgroundTasks): roles
background_task = blueprint_loader
roles = RoleSet { roles: {} }
|
| 665 | 2024-12-13T22:29:54.698Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_replacement_driver
roles = RoleSet { roles: {} }
|
| 666 | 2024-12-13T22:29:54.698Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = blueprint_loader
resource = Database
result = Ok(())
|
| 667 | 2024-12-13T22:29:54.698Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_replacement_driver
resource = Database
result = Ok(())
|
| 668 | 2024-12-13T22:29:54.700Z | DEBG | nexus (BackgroundTasks): roles
background_task = blueprint_loader
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 669 | 2024-12-13T22:29:54.703Z | DEBG | nexus (BackgroundTasks): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = blueprint_loader
resource = BlueprintConfig
result = Ok(())
|
| 670 | 2024-12-13T22:29:54.703Z | DEBG | nexus (BackgroundTasks): roles
background_task = blueprint_loader
roles = RoleSet { roles: {} }
|
| 671 | 2024-12-13T22:29:54.703Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = blueprint_loader
resource = Database
result = Ok(())
|
| 672 | 2024-12-13T22:29:54.705Z | WARN | nexus (BackgroundTasks): failed to read target blueprint
background_task = blueprint_loader
error = Internal Error: no target blueprint set
file = nexus/src/app/background/tasks/blueprint_load.rs:69
|
| 673 | 2024-12-13T22:29:54.705Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = blueprint_loader
elapsed = 7.435959ms
iteration = 2
status = {"error":"failed to read target blueprint: Internal Error: no target blueprint set"}
|
| 674 | 2024-12-13T22:29:54.729Z | DEBG | nexus (BackgroundTasks): roles
background_task = region_replacement_driver
roles = RoleSet { roles: {} }
|
| 675 | 2024-12-13T22:29:54.730Z | DEBG | nexus (BackgroundTasks): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002, .. })
background_task = region_replacement_driver
resource = Database
result = Ok(())
|
| 676 | 2024-12-13T22:29:54.768Z | DEBG | nexus (BackgroundTasks): activation complete
background_task = region_replacement_driver
elapsed = 70.567228ms
iteration = 2
status = {"drive_invoked_ok":[],"errors":[],"finish_invoked_ok":[]}
|
| 677 | 2024-12-13T22:29:55.673Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 678 | 2024-12-13T22:29:55.674Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 679 | 2024-12-13T22:29:55.675Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 680 | 2024-12-13T22:29:55.676Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 681 | 2024-12-13T22:29:55.678Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 682 | 2024-12-13T22:29:55.680Z | DEBG | nexus (ServiceBalancer): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Rack { parent: Fleet, key: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, lookup_type: ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b) }
result = Ok(())
|
| 683 | 2024-12-13T22:29:55.680Z | INFO | nexus: Still waiting for rack initialization: Rack { identity: RackIdentity { id: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, time_created: 2024-12-13T22:29:45.792768Z, time_modified: 2024-12-13T22:29:45.792768Z }, initialized: false, tuf_base_url: None, rack_subnet: Some(V6(Ipv6Network { addr: fd00:1122:3344:100::, prefix: 56 })) }
file = nexus/src/app/rack.rs:768
|
| 684 | 2024-12-13T22:29:57.681Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 685 | 2024-12-13T22:29:57.682Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 686 | 2024-12-13T22:29:57.683Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 687 | 2024-12-13T22:29:57.683Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 688 | 2024-12-13T22:29:57.685Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 689 | 2024-12-13T22:29:57.687Z | DEBG | nexus (ServiceBalancer): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Rack { parent: Fleet, key: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, lookup_type: ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b) }
result = Ok(())
|
| 690 | 2024-12-13T22:29:57.687Z | INFO | nexus: Still waiting for rack initialization: Rack { identity: RackIdentity { id: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, time_created: 2024-12-13T22:29:45.792768Z, time_modified: 2024-12-13T22:29:45.792768Z }, initialized: false, tuf_base_url: None, rack_subnet: Some(V6(Ipv6Network { addr: fd00:1122:3344:100::, prefix: 56 })) }
file = nexus/src/app/rack.rs:768
|
| 691 | 2024-12-13T22:29:59.689Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 692 | 2024-12-13T22:29:59.689Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 693 | 2024-12-13T22:29:59.691Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 694 | 2024-12-13T22:29:59.691Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 695 | 2024-12-13T22:29:59.693Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 696 | 2024-12-13T22:29:59.695Z | DEBG | nexus (ServiceBalancer): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Rack { parent: Fleet, key: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, lookup_type: ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b) }
result = Ok(())
|
| 697 | 2024-12-13T22:29:59.695Z | INFO | nexus: Still waiting for rack initialization: Rack { identity: RackIdentity { id: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, time_created: 2024-12-13T22:29:45.792768Z, time_modified: 2024-12-13T22:29:45.792768Z }, initialized: false, tuf_base_url: None, rack_subnet: Some(V6(Ipv6Network { addr: fd00:1122:3344:100::, prefix: 56 })) }
file = nexus/src/app/rack.rs:768
|
| 698 | 2024-12-13T22:30:01.695Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 699 | 2024-12-13T22:30:01.695Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 700 | 2024-12-13T22:30:01.698Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {} }
|
| 701 | 2024-12-13T22:30:01.698Z | DEBG | nexus (ServiceBalancer): authorize result
action = Query
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Database
result = Ok(())
|
| 702 | 2024-12-13T22:30:01.700Z | DEBG | nexus (ServiceBalancer): roles
roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} }
|
| 703 | 2024-12-13T22:30:01.702Z | DEBG | nexus (ServiceBalancer): authorize result
action = Read
actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3, .. })
resource = Rack { parent: Fleet, key: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, lookup_type: ById(984ee802-6f4e-4d6b-aed6-da91b38cb72b) }
result = Ok(())
|
| 704 | 2024-12-13T22:30:01.702Z | INFO | nexus: Still waiting for rack initialization: Rack { identity: RackIdentity { id: 984ee802-6f4e-4d6b-aed6-da91b38cb72b, time_created: 2024-12-13T22:29:45.792768Z, time_modified: 2024-12-13T22:29:45.792768Z }, initialized: false, tuf_base_url: None, rack_subnet: Some(V6(Ipv6Network { addr: fd00:1122:3344:100::, prefix: 56 })) }
file = nexus/src/app/rack.rs:768
|