{"msg":"cockroach temporary directory: /var/tmp/omicron_tmp/.tmpK1FBQn","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:41.445343602Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"cockroach: copying from seed tarball (/var/tmp/omicron_tmp/crdb-base-build/86dc63ea733d57124b04011d272bdef733cc809626ac252032305856f71a5e15.tar) to storage directory (/var/tmp/omicron_tmp/.tmpK1FBQn/data)","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:41.445826192Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"cockroach command line: cockroach start-single-node --insecure --http-addr=:0 --store=path=/var/tmp/omicron_tmp/.tmpK1FBQn/data,ballast-size=0 --listen-addr [::1]:0 --listening-url-file /var/tmp/omicron_tmp/.tmpK1FBQn/listen-url","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:41.464684511Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"cockroach environment: BUILDOMAT_JOB_ID=01JP8BJHAVN45YRY7P5ZD6Q7KV BUILDOMAT_TASK_ID=4 CARGO=/home/build/.rustup/toolchains/1.85.0-x86_64-unknown-illumos/bin/cargo CARGO_HOME=/home/build/.cargo CARGO_INCREMENTAL=0 CARGO_MANIFEST_DIR=/work/oxidecomputer/omicron/nexus/db-queries CARGO_PKG_AUTHORS= CARGO_PKG_DESCRIPTION= CARGO_PKG_HOMEPAGE= CARGO_PKG_LICENSE=MPL-2.0 CARGO_PKG_LICENSE_FILE= CARGO_PKG_NAME=nexus-db-queries CARGO_PKG_REPOSITORY= CARGO_PKG_RUST_VERSION= CARGO_PKG_VERSION=0.1.0 CARGO_PKG_VERSION_MAJOR=0 CARGO_PKG_VERSION_MINOR=1 CARGO_PKG_VERSION_PATCH=0 CARGO_PKG_VERSION_PRE= CARGO_TERM_COLOR=always CI=true CRDB_SEED_TAR=/var/tmp/omicron_tmp/crdb-base-build/86dc63ea733d57124b04011d272bdef733cc809626ac252032305856f71a5e15.tar GITHUB_BRANCH=eliza/webhook-models GITHUB_REF=refs/heads/eliza/webhook-models GITHUB_REPOSITORY=oxidecomputer/omicron GITHUB_SHA=143b34b1eeac68ce9ec7a50a0fbabafadec9f444 GOTRACEBACK=crash HOME=/home/build LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8 LD_LIBRARY_PATH=/work/oxidecomputer/omicron/target/debug/build/aws-lc-sys-4a4f33af3de2444d/out/build/artifacts:/work/oxidecomputer/omicron/target/debug/build/blake3-9ac0d43087b1884e/out:/work/oxidecomputer/omicron/target/debug/build/bzip2-sys-7ed663b343a5fc8e/out/lib:/work/oxidecomputer/omicron/target/debug/build/libgit2-sys-ba7021cfa9b61307/out/build:/work/oxidecomputer/omicron/target/debug/build/ring-c73ed488508dfaf4/out:/work/oxidecomputer/omicron/target/debug/build/tofino-42eb1c7425b5dc3f/out:/work/oxidecomputer/omicron/target/debug/deps:/work/oxidecomputer/omicron/target/debug:/home/build/.rustup/toolchains/1.85.0-x86_64-unknown-illumos/lib/rustlib/x86_64-unknown-illumos/lib:/home/build/.rustup/toolchains/1.85.0-x86_64-unknown-illumos/lib LOGNAME=build NEXTEST=1 NEXTEST_EXECUTION_MODE=process-per-test NEXTEST_LD_LIBRARY_PATH=/work/oxidecomputer/omicron/target/debug/build/aws-lc-sys-4a4f33af3de2444d/out/build/artifacts:/work/oxidecomputer/omicron/target/debug/build/blake3-9ac0d43087b1884e/out:/work/oxidecomputer/omicron/target/debug/build/bzip2-sys-7ed663b343a5fc8e/out/lib:/work/oxidecomputer/omicron/target/debug/build/libgit2-sys-ba7021cfa9b61307/out/build:/work/oxidecomputer/omicron/target/debug/build/ring-c73ed488508dfaf4/out:/work/oxidecomputer/omicron/target/debug/build/tofino-42eb1c7425b5dc3f/out:/work/oxidecomputer/omicron/target/debug/deps:/work/oxidecomputer/omicron/target/debug:/home/build/.rustup/toolchains/1.85.0-x86_64-unknown-illumos/lib/rustlib/x86_64-unknown-illumos/lib:/home/build/.rustup/toolchains/1.85.0-x86_64-unknown-illumos/lib NEXTEST_PROFILE=ci NEXTEST_RUN_ID=41b0e20d-0dbf-4c68-bb70-9fb803982bd2 NEXTEST_TEST_GLOBAL_SLOT=2 NEXTEST_TEST_GROUP=@global NEXTEST_TEST_GROUP_SLOT=none OUT_DIR=/work/oxidecomputer/omicron/target/debug/build/nexus-db-queries-ecc5989159d779cb/out PATH=/work/oxidecomputer/omicron/out/mgd/root/opt/oxide/mgd/bin:/work/oxidecomputer/omicron/out/dendrite-stub/bin:/work/oxidecomputer/omicron/out/clickhouse:/work/oxidecomputer/omicron/out/cockroachdb/bin:/home/build/.cargo/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/ooce/bin:/opt/ooce/sbin PWD=/work/oxidecomputer/omicron RUSTC_BOOTSTRAP=1 RUSTDOCFLAGS=--document-private-items -D warnings RUSTFLAGS=-D warnings -C link-arg=-R/usr/platform/oxide/lib/amd64 RUSTUP_HOME=/home/build/.rustup RUSTUP_TOOLCHAIN=1.85.0-x86_64-unknown-illumos RUST_BACKTRACE=1 RUST_RECURSION_COUNT=1 SHLVL=1 SSL_CERT_DIR=/usr/ssl/certs SSL_CERT_FILE=/etc/ssl/cacert.pem TMPDIR=/var/tmp/omicron_tmp TZ=UTC USER=build _=/usr/bin/ptime __NEXTEST_ATTEMPT=1","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:41.46534208Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"cockroach pid: 16910","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:42.700565429Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"cockroach listen URL: postgresql://root@[::1]:60350/omicron?sslmode=disable","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:42.700686174Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"registered USDT probes","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:42.701307557Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"Database schema version is up to date","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.062113921Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"desired_version":"130.0.0","found_version":"130.0.0"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.062657443Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Action"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.062796616Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"AnyActor"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.062853619Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"AuthenticatedActor"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.062889074Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"BlueprintConfig"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063031656Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Database"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063074571Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"DnsConfig"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063103348Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Fleet"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063138793Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Inventory"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063184488Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"IpPoolList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063214034Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"ConsoleSessionList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.06324742Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"DeviceAuthRequestList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063276866Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloCertificateList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063308712Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloIdentityProviderList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063333869Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloUserList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063356946Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"TargetReleaseConfig"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.063418039Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"WebhookEventClassList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.06372742Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Project"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064038841Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Disk"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064100853Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Snapshot"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064133839Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"ProjectImage"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064163486Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"AffinityGroup"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064253144Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"AntiAffinityGroup"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.06428882Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Instance"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064318776Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"IpPool"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064343683Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"InstanceNetworkInterface"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.06436783Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Vpc"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064397206Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"VpcRouter"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064420974Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"InternetGateway"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064460278Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"InternetGatewayIpPool"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064511362Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"InternetGatewayIpAddress"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064544348Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"RouterRoute"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064575684Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"VpcSubnet"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064601261Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"FloatingIp"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064626348Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Image"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064656304Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloImage"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064683651Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"AddressLot"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064709098Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Blueprint"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064738474Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"LoopbackAddress"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064764191Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Certificate"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064794227Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"ConsoleSession"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064821024Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"DeviceAuthRequest"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.06484729Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"DeviceAccessToken"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064877437Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"PhysicalDisk"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064902863Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Rack"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.06492759Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"RoleBuiltin"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064959056Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SshKey"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.064984933Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Silo"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.06500882Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloUser"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065038406Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloGroup"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065062863Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SupportBundle"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.06509239Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"IdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065117097Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SamlIdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065143413Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Sled"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065175869Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"TufRepo"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065202686Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"TufArtifact"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065230762Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"WebhookEvent"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065265818Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"WebhookReceiver"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065292135Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"WebhookSecret"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065321541Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Zpool"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065346608Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Service"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.065376234Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"UserBuiltin"}
{"msg":"full Oso configuration","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.06541382Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"config":"#\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system.  All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n    actor.authenticated and\n    has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - \"create_child\": required to create child resources (of any type)\n#\n# - \"list_children\": required to list child resources (of all types) of a\n#   resource\n#\n# - \"modify\": required to modify or delete a resource\n#\n# - \"read\": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project.  The specific roles\n# are oriented around intended use-cases:\n#\n# - \"admin\": has all permissions on the resource\n#\n# - \"collaborator\": has \"read\", \"list_children\", and \"create_child\", plus\n#   the \"admin\" role for child resources.  The idea is that if you're an\n#   Organization Collaborator, you have full control over the Projects within\n#   the Organization, but you cannot modify or delete the Organization itself.\n#\n# - \"viewer\": has \"read\" and \"list_children\" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level.  For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin           (superuser for the whole system)\n# - fleet.collaborator    (can manage Silos)\n# - fleet.viewer          (can read most non-siloed resources in the system)\n# - silo.admin            (superuser for the silo)\n# - silo.collaborator     (can create and own Organizations)\n# - silo.viewer           (can read most resources within the Silo)\n# - organization.admin    (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer   (can read most resources within the Organization)\n# - project.admin         (complete control over a Project)\n# - project.collaborator  (can manage all resources within the Project)\n# - project.viewer        (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below).  We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# \"Fleet\" is a global singleton representing the whole system.  The name comes\n# from the idea described in RFD 24, but it's not quite right.  This probably\n# should be more like \"Region\" or \"AvailabilityZone\".  The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\troles = [\n\t    # Roles that can be attached by users\n\t    \"admin\",\n\t    \"collaborator\",\n\t    \"viewer\",\n\n\t    # Internal-only roles\n\t    \"external-authenticator\"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Permissions implied by roles on this resource's parent (Fleet).  Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo.  To achieve this, we use permission rules here.  (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"collaborator\" on \"parent_fleet\";\n\n\t# external authenticator has to create silo users\n\t\"list_children\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo.  That's\n# not quite the same as having the \"viewer\" role.  For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using \"POST /organizations\", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404.  This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t\"admin\" if \"collaborator\" on \"parent_silo\";\n\t\"viewer\" if \"viewer\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro.  Some resources require custom Polar code.  Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users.  This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"read\" on \"parent_fleet\";\n\t\"read\" if \"read\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n    if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n    if silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { silo_user: SiloUser };\n\n\t\"read\" if \"read\" on \"silo_user\";\n\t\"modify\" if \"modify\" on \"silo_user\";\n}\nhas_relation(user: SiloUser, \"silo_user\", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database.  These are used either at the top level\n# of the API path (e.g., \"/v1/system/ip-pools\") or as an implementation detail of the system\n# (in the case of console sessions and \"Database\").  The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet.  None of these resources defines their own roles.\n#\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t# \"external-authenticator\" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos.  These\n\t# operations necessarily need to read and modify DNS configuration.\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"modify\" if \"external-authenticator\" on \"parent_fleet\";\n\t# \"admin\" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t    \"list_children\", # list blueprints\n\t    \"create_child\",  # create blueprint\n\t    \"read\",          # read the current target\n\t    \"modify\",        # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource TargetReleaseConfig {\n\tpermissions = [\n\t    \"read\",          # read the current target release\n\t    \"modify\",        # change the current target release\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", resource: TargetReleaseConfig)\n\tif resource.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/ip-pools\" in the API\nresource IpPoolList {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list IP Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, \"create_child\", ip_pool: IpPool)\n\tif silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration.  This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on.  This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission.  For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's users.  This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on.  This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission.  For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions.  This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif has_role(actor, \"external-authenticator\", silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with.  Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(_actor: AuthenticatedActor, \"read\", _device_auth: DeviceAuthRequest);\nhas_permission(_actor: AuthenticatedActor, \"modify\", _device_auth: DeviceAuthRequest);\n\nhas_permission(actor: AuthenticatedActor, \"read\", device_token: DeviceAccessToken)\n\tif has_role(actor, \"external-authenticator\", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", identity_provider: IdentityProvider)\n\tif has_role(actor, \"external-authenticator\", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, \"external-authenticator\", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t    # \"query\" is required to perform any query against the database,\n\t    # whether a read or write query.  This is checked when an operation\n\t    # checks out a database connection from the connection pool.\n\t    #\n\t    # Any authenticated user gets this permission.  There's generally\n\t    # some other authz check involved in the database query.  For\n\t    # example, if you're querying the database to \"read\" a \"Project\", we\n\t    # should also be checking that.  So why do we do this at all?  It's\n\t    # a belt-and-suspenders measure so that if we somehow introduced an\n\t    # unauthenticated code path that hits the database, it cannot be\n\t    # used to DoS the database because we won't allow the operation to\n\t    # make the query.  (As long as the code path _is_ authenticated, we\n\t    # can use throttling mechanisms to prevent DoS.)\n\t    \"query\",\n\n\t    # \"modify\" is required to populate database data that's delivered\n\t    # with the system.  It should also be required for schema changes,\n\t    # when we support those.  This is separate from \"query\" so that we\n\t    # cannot accidentally invoke these code paths from API calls and\n\t    # other general functions.\n\t    \"modify\"\n\t];\n}\n\n# All authenticated users have the \"query\" permission on the database.\nhas_permission(_actor: AuthenticatedActor, \"query\", _resource: Database);\n\n# The \"db-init\" user is the only one with the \"modify\" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"modify\", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"create_child\", _resource: IpPoolList);\n# It also has \"admin\" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, \"admin\", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, \"admin\", _silo: Silo);\n\nresource WebhookSecret {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_webhook_receiver: WebhookReceiver };\n\n\t\"read\" if \"read\" on \"parent_webhook_receiver\";\n\t\"modify\" if \"modify\" on \"parent_webhook_receiver\";\n}\n\nhas_relation(rx: WebhookReceiver, \"parent_webhook_receiver\", secret: WebhookSecret)\n\tif secret.webhook_receiver = rx;\n\nresource WebhookEventClassList {\n\tpermissions = [ \"list_children\" ];\n\trelations = { parent_fleet: Fleet };\n\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: WebhookEventClassList)\n\tif collection.fleet = fleet;\n\n\n\n                resource Disk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Disk)\n                        if child.project = parent;\n            \n\n                resource Snapshot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Snapshot)\n                        if child.project = parent;\n            \n\n                resource ProjectImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: ProjectImage)\n                        if child.project = parent;\n            \n\n                resource AffinityGroup {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: AffinityGroup)\n                        if child.project = parent;\n            \n\n                resource AntiAffinityGroup {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: AntiAffinityGroup)\n                        if child.project = parent;\n            \n\n                resource Instance {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Instance)\n                        if child.project = parent;\n            \n\n                resource IpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: IpPool)\n                    if child.fleet = fleet;\n            \n\n                resource InstanceNetworkInterface {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Instance\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InstanceNetworkInterface)\n                    if has_relation(project, \"containing_project\", child.instance);\n\n                has_relation(parent: Instance, \"parent\", child: InstanceNetworkInterface)\n                    if child.instance = parent;\n            \n\n                resource Vpc {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Vpc)\n                        if child.project = parent;\n            \n\n                resource VpcRouter {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcRouter)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcRouter)\n                    if child.vpc = parent;\n            \n\n                resource InternetGateway {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGateway)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: InternetGateway)\n                    if child.vpc = parent;\n            \n\n                resource InternetGatewayIpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: InternetGateway\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGatewayIpPool)\n                    if has_relation(project, \"containing_project\", child.internet_gateway);\n\n                has_relation(parent: InternetGateway, \"parent\", child: InternetGatewayIpPool)\n                    if child.internet_gateway = parent;\n            \n\n                resource InternetGatewayIpAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: InternetGateway\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGatewayIpAddress)\n                    if has_relation(project, \"containing_project\", child.internet_gateway);\n\n                has_relation(parent: InternetGateway, \"parent\", child: InternetGatewayIpAddress)\n                    if child.internet_gateway = parent;\n            \n\n                resource RouterRoute {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: VpcRouter\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: RouterRoute)\n                    if has_relation(project, \"containing_project\", child.vpc_router);\n\n                has_relation(parent: VpcRouter, \"parent\", child: RouterRoute)\n                    if child.vpc_router = parent;\n            \n\n                resource VpcSubnet {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcSubnet)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcSubnet)\n                    if child.vpc = parent;\n            \n\n                resource FloatingIp {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: FloatingIp)\n                        if child.project = parent;\n            \n\n                resource Image {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: Image)\n                    if child.silo = parent;\n            \n\n                resource SiloImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: SiloImage)\n                    if child.silo = parent;\n            \n\n                resource AddressLot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: AddressLot)\n                    if child.fleet = fleet;\n            \n\n                resource Blueprint {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Blueprint)\n                    if child.fleet = fleet;\n            \n\n                resource LoopbackAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: LoopbackAddress)\n                    if child.fleet = fleet;\n            \n\n\n                resource ConsoleSession {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: ConsoleSession)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAuthRequest {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAuthRequest)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAccessToken {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAccessToken)\n                    if child.fleet = fleet;\n            \n\n                resource PhysicalDisk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: PhysicalDisk)\n                    if child.fleet = fleet;\n            \n\n                resource Rack {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Rack)\n                    if child.fleet = fleet;\n            \n\n                resource RoleBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: RoleBuiltin)\n                    if child.fleet = fleet;\n            \n\n\n\n\n\n                resource SupportBundle {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: SupportBundle)\n                    if child.fleet = fleet;\n            \n\n\n\n                resource Sled {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Sled)\n                    if child.fleet = fleet;\n            \n\n                resource TufRepo {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufRepo)\n                    if child.fleet = fleet;\n            \n\n                resource TufArtifact {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufArtifact)\n                    if child.fleet = fleet;\n            \n\n                resource WebhookEvent {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: WebhookEvent)\n                    if child.fleet = fleet;\n            \n\n                resource WebhookReceiver {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: WebhookReceiver)\n                    if child.fleet = fleet;\n            \n\n\n                resource Zpool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Zpool)\n                    if child.fleet = fleet;\n            \n\n                resource Service {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Service)\n                    if child.fleet = fleet;\n            \n\n                resource UserBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: UserBuiltin)\n                    if child.fleet = fleet;\n            "}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.090844061Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.090932159Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.094071658Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in users","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.094206811Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.094646847Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.094710908Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.095213256Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 5 built-in users","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.17446028Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.174532551Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.174587844Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.177548605Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.178415887Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.17846955Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.178499476Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.17902838Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 10 built-in roles","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.211662504Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.211744613Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.211775819Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.214996208Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in role assignments","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.215049041Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.215089886Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.215120042Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.215573336Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 4 built-in role assignments","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.648555856Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.648647074Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.64867946Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.651193577Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in silos","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.651243001Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.651268767Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.651311342Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.651698504Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 2 built-in silos","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.765848698Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.765900512Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.765944786Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.766628761Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.776358248Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.776463305Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.779157969Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in projects","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.779214092Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.779256106Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.779285353Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.779785161Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.783185327Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.783258188Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.783360995Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.783458653Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.784096653Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.788714158Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.788803837Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.788866349Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.789517937Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.791223595Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.795694028Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.795806914Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.795857518Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.795906351Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.795947636Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.796444844Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.798383253Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.79848808Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.798601525Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.799396646Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.803092956Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.807674775Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.807786121Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.807830505Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.808413533Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created built-in services project","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:43.839211144Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.839286495Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.839366325Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.845758208Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in VPCs","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.845850057Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.845875784Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.845913169Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.846820016Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.85312864Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.853499054Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.856094151Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.860708436Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.860792275Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.860844268Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.860882584Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.862659192Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.868542659Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.868633698Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.868685201Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.869906289Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.873766508Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.873824321Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.873876074Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.874457362Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.972872207Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.979626925Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"successful lookup of siloed resource \"Project\" using built-in user","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.979718704Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.979756449Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.979800254Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.97982859Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.979883793Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.980323328Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.983295088Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.983369129Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.983406874Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.983974943Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.985504713Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.985623228Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.985711137Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.986424088Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.988023229Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.995210643Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:43.99531543Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.995351225Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:43.995803289Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.009792016Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.009898843Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.009941527Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.009977623Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.010684855Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.012479661Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.012533244Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.012581378Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.013164925Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.014756277Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.014834528Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.014869973Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.015700029Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.017347954Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.025227702Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.025331259Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.025364225Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.025865383Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.032312539Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.032439623Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.033181511Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.043431624Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.043516393Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.044280398Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.048931638Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.049034795Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.049211763Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.049278095Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.05003759Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.051660598Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.051713061Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.051762915Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.05236661Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.05397529Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.054040971Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.054073827Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.054678472Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.060580826Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.0721037Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.072558474Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.072607917Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.074615547Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.170847604Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.171015543Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.171083815Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.17112521Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.17200282Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.174056704Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.174185248Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.174219504Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.174922677Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.177368882Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.177643257Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.177749264Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.178813142Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.182336853Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.193730022Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.193873485Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.193928648Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.1943114Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.270316178Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.270453771Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.270503505Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.270546079Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.271773127Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.273717614Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.273774577Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.27382818Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.274345376Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.275923289Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.275977563Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.276030486Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.276667337Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.278047254Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.28923562Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.289347656Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.289386161Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.289875631Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create built-in VPC firewall rules","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.297814411Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.29798592Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.298111804Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.300396349Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.31523497Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.315539742Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.318078656Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.321832688Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.321891941Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.322924182Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.32534772Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.325446777Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.32550232Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.325537946Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.326768613Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.33601811Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.3361002Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.336138015Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.336958643Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.338624795Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.338676139Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.338710034Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.339279594Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.340999269Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.347585108Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"successful lookup of siloed resource \"Vpc\" using built-in user","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.347666398Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.347704313Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Read","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.347748788Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.347773055Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.347805991Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.348260364Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.350016205Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.350079038Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.350131001Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.350694081Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.352280343Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.352332497Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.352367203Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.352825745Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.354464321Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.361816275Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Read","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.361864269Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.361884836Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.362329321Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.37060246Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.370719325Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.37076245Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.370795866Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.371496459Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.373164051Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.373219454Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.373287395Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.373800771Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.375484622Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.375546564Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.37557926Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.376118172Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.377674789Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.384728759Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.384798261Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.384836116Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.385291599Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created built-in VPC firewall rules","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.476482175Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"attempting to create built-in VPC Subnets","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.476558035Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.476585852Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.476618338Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.477460223Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.481357447Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.481502739Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.482518132Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.485394634Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.485449957Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.48622658Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.488208623Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.488271935Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.488304921Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.488331448Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.488947611Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.49040277Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.490453103Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.49048178Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.491076146Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.492584008Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.492637361Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.492672437Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.493280431Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.49465809Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.501880129Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"successful lookup of siloed resource \"Vpc\" using built-in user","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.501966529Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.501993305Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.502019592Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.502468646Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.521629648Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.52233811Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.522397273Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.522449726Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.524164412Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.531797231Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.531872792Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.531907357Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.533066023Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.539714024Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.539788215Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.539824051Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.540689283Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.543563955Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.553929023Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.561809751Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.561883212Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.561920967Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.561952583Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.562715268Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.56429808Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.564419465Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.56462Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.565529517Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.567167143Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.56727384Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.567403713Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.568342776Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.569970733Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.57970644Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.579813697Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.579858921Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.580339371Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.591161243Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.591225675Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.591953114Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.593607368Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.593782156Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.593877124Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.593928778Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.594342656Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.596007169Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.596086159Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.596122185Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.596695363Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.59808565Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.598132644Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.59816068Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.598903418Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.600470632Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.608576512Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.620759054Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.621134407Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.621257022Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.62135619Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.625721506Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.629005307Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.62905828Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.629362682Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.630354348Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.63250524Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.632558444Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.63258714Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.633756424Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.636941747Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.645391144Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.645456236Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.645528767Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.645956094Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.651496933Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.651560645Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.652288495Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.653985533Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.654066603Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.65417675Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.65425467Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.654865964Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.666412525Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.666568335Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.666679751Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.682210766Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.68530503Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.685365263Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.685398868Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.687002379Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.688776917Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.698576706Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.703473766Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.704690314Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.704744297Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.704778333Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.705602941Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.709544189Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.709830934Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.71001963Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.710915398Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.714072175Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.714129408Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.714164214Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.714199099Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.71604083Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.732456214Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.732524145Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.732557301Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.733058119Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.742787106Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.743034876Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.745866603Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created built-in services vpc subnets","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.752611872Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"created built-in services vpc","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.752657916Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.752681513Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.75270843Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.757803735Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"attempting to create silo users","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.757900213Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.757985502Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.758023437Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.761163646Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 2 silo users","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.77509646Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"attempting to create silo user role assignments","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.775145484Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.77517332Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.775204066Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.775475282Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"created 2 silo user role assignments","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.782103606Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.78215312Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.782185216Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.783253952Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.791230508Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.791291001Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.792638783Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.804763342Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.804931031Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.804970256Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.804995773Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.806023495Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.808726348Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.813644365Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.813707967Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.813742173Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.814472272Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.819969117Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.820037278Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.820074814Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.82010117Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.820572361Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.822194819Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.825659798Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.825697923Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.825723499Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.826502892Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:44.950497269Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.954465595Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:44.955735837Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001, .. })"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.961913027Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Action"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.961962311Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"AnyActor"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.962108353Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"AuthenticatedActor"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.962147278Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"BlueprintConfig"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.962310467Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Database"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.962340274Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"DnsConfig"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.962547018Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Fleet"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.962637627Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Inventory"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.962665253Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"IpPoolList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.962745073Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"ConsoleSessionList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.963464553Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"DeviceAuthRequestList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.963509488Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloCertificateList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.963540394Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloIdentityProviderList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.963566081Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloUserList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.963592158Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"TargetReleaseConfig"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.963619234Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"WebhookEventClassList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.96364893Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Project"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.963690765Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Disk"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.963744918Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Snapshot"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964448621Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"ProjectImage"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964499815Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"AffinityGroup"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.96453152Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"AntiAffinityGroup"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964559797Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Instance"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964586834Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"IpPool"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.96461459Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"InstanceNetworkInterface"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964643037Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Vpc"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964672783Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"VpcRouter"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.96470015Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"InternetGateway"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964727376Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"InternetGatewayIpPool"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964756172Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"InternetGatewayIpAddress"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964851661Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"RouterRoute"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964877068Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"VpcSubnet"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964899935Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"FloatingIp"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964923632Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Image"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964947529Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloImage"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.964974025Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"AddressLot"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965094141Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Blueprint"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965138915Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"LoopbackAddress"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965172151Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Certificate"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965202237Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"ConsoleSession"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965232523Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"DeviceAuthRequest"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.96526006Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"DeviceAccessToken"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965286426Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"PhysicalDisk"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965310114Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Rack"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.96533544Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"RoleBuiltin"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965361047Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SshKey"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965386504Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Silo"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965412011Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloUser"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965436438Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SiloGroup"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965460445Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SupportBundle"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965483482Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"IdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965508279Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"SamlIdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.96558026Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Sled"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965614485Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"TufRepo"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965641582Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"TufArtifact"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965667419Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"WebhookEvent"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965692096Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"WebhookReceiver"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965716273Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"WebhookSecret"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965787484Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Zpool"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.96582197Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"Service"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965853336Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"class":"UserBuiltin"}
{"msg":"full Oso configuration","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:44.965886642Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"config":"#\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system.  All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n    actor.authenticated and\n    has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - \"create_child\": required to create child resources (of any type)\n#\n# - \"list_children\": required to list child resources (of all types) of a\n#   resource\n#\n# - \"modify\": required to modify or delete a resource\n#\n# - \"read\": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project.  The specific roles\n# are oriented around intended use-cases:\n#\n# - \"admin\": has all permissions on the resource\n#\n# - \"collaborator\": has \"read\", \"list_children\", and \"create_child\", plus\n#   the \"admin\" role for child resources.  The idea is that if you're an\n#   Organization Collaborator, you have full control over the Projects within\n#   the Organization, but you cannot modify or delete the Organization itself.\n#\n# - \"viewer\": has \"read\" and \"list_children\" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level.  For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin           (superuser for the whole system)\n# - fleet.collaborator    (can manage Silos)\n# - fleet.viewer          (can read most non-siloed resources in the system)\n# - silo.admin            (superuser for the silo)\n# - silo.collaborator     (can create and own Organizations)\n# - silo.viewer           (can read most resources within the Silo)\n# - organization.admin    (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer   (can read most resources within the Organization)\n# - project.admin         (complete control over a Project)\n# - project.collaborator  (can manage all resources within the Project)\n# - project.viewer        (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below).  We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# \"Fleet\" is a global singleton representing the whole system.  The name comes\n# from the idea described in RFD 24, but it's not quite right.  This probably\n# should be more like \"Region\" or \"AvailabilityZone\".  The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\troles = [\n\t    # Roles that can be attached by users\n\t    \"admin\",\n\t    \"collaborator\",\n\t    \"viewer\",\n\n\t    # Internal-only roles\n\t    \"external-authenticator\"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Permissions implied by roles on this resource's parent (Fleet).  Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo.  To achieve this, we use permission rules here.  (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"collaborator\" on \"parent_fleet\";\n\n\t# external authenticator has to create silo users\n\t\"list_children\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo.  That's\n# not quite the same as having the \"viewer\" role.  For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using \"POST /organizations\", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404.  This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t\"admin\" if \"collaborator\" on \"parent_silo\";\n\t\"viewer\" if \"viewer\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro.  Some resources require custom Polar code.  Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users.  This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"read\" on \"parent_fleet\";\n\t\"read\" if \"read\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n    if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n    if silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { silo_user: SiloUser };\n\n\t\"read\" if \"read\" on \"silo_user\";\n\t\"modify\" if \"modify\" on \"silo_user\";\n}\nhas_relation(user: SiloUser, \"silo_user\", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database.  These are used either at the top level\n# of the API path (e.g., \"/v1/system/ip-pools\") or as an implementation detail of the system\n# (in the case of console sessions and \"Database\").  The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet.  None of these resources defines their own roles.\n#\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t# \"external-authenticator\" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos.  These\n\t# operations necessarily need to read and modify DNS configuration.\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"modify\" if \"external-authenticator\" on \"parent_fleet\";\n\t# \"admin\" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t    \"list_children\", # list blueprints\n\t    \"create_child\",  # create blueprint\n\t    \"read\",          # read the current target\n\t    \"modify\",        # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource TargetReleaseConfig {\n\tpermissions = [\n\t    \"read\",          # read the current target release\n\t    \"modify\",        # change the current target release\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", resource: TargetReleaseConfig)\n\tif resource.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/ip-pools\" in the API\nresource IpPoolList {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list IP Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, \"create_child\", ip_pool: IpPool)\n\tif silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration.  This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on.  This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission.  For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's users.  This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on.  This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission.  For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions.  This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif has_role(actor, \"external-authenticator\", silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with.  Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(_actor: AuthenticatedActor, \"read\", _device_auth: DeviceAuthRequest);\nhas_permission(_actor: AuthenticatedActor, \"modify\", _device_auth: DeviceAuthRequest);\n\nhas_permission(actor: AuthenticatedActor, \"read\", device_token: DeviceAccessToken)\n\tif has_role(actor, \"external-authenticator\", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", identity_provider: IdentityProvider)\n\tif has_role(actor, \"external-authenticator\", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, \"external-authenticator\", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t    # \"query\" is required to perform any query against the database,\n\t    # whether a read or write query.  This is checked when an operation\n\t    # checks out a database connection from the connection pool.\n\t    #\n\t    # Any authenticated user gets this permission.  There's generally\n\t    # some other authz check involved in the database query.  For\n\t    # example, if you're querying the database to \"read\" a \"Project\", we\n\t    # should also be checking that.  So why do we do this at all?  It's\n\t    # a belt-and-suspenders measure so that if we somehow introduced an\n\t    # unauthenticated code path that hits the database, it cannot be\n\t    # used to DoS the database because we won't allow the operation to\n\t    # make the query.  (As long as the code path _is_ authenticated, we\n\t    # can use throttling mechanisms to prevent DoS.)\n\t    \"query\",\n\n\t    # \"modify\" is required to populate database data that's delivered\n\t    # with the system.  It should also be required for schema changes,\n\t    # when we support those.  This is separate from \"query\" so that we\n\t    # cannot accidentally invoke these code paths from API calls and\n\t    # other general functions.\n\t    \"modify\"\n\t];\n}\n\n# All authenticated users have the \"query\" permission on the database.\nhas_permission(_actor: AuthenticatedActor, \"query\", _resource: Database);\n\n# The \"db-init\" user is the only one with the \"modify\" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"modify\", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"create_child\", _resource: IpPoolList);\n# It also has \"admin\" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, \"admin\", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, \"admin\", _silo: Silo);\n\nresource WebhookSecret {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_webhook_receiver: WebhookReceiver };\n\n\t\"read\" if \"read\" on \"parent_webhook_receiver\";\n\t\"modify\" if \"modify\" on \"parent_webhook_receiver\";\n}\n\nhas_relation(rx: WebhookReceiver, \"parent_webhook_receiver\", secret: WebhookSecret)\n\tif secret.webhook_receiver = rx;\n\nresource WebhookEventClassList {\n\tpermissions = [ \"list_children\" ];\n\trelations = { parent_fleet: Fleet };\n\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: WebhookEventClassList)\n\tif collection.fleet = fleet;\n\n\n\n                resource Disk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Disk)\n                        if child.project = parent;\n            \n\n                resource Snapshot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Snapshot)\n                        if child.project = parent;\n            \n\n                resource ProjectImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: ProjectImage)\n                        if child.project = parent;\n            \n\n                resource AffinityGroup {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: AffinityGroup)\n                        if child.project = parent;\n            \n\n                resource AntiAffinityGroup {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: AntiAffinityGroup)\n                        if child.project = parent;\n            \n\n                resource Instance {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Instance)\n                        if child.project = parent;\n            \n\n                resource IpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: IpPool)\n                    if child.fleet = fleet;\n            \n\n                resource InstanceNetworkInterface {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Instance\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InstanceNetworkInterface)\n                    if has_relation(project, \"containing_project\", child.instance);\n\n                has_relation(parent: Instance, \"parent\", child: InstanceNetworkInterface)\n                    if child.instance = parent;\n            \n\n                resource Vpc {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Vpc)\n                        if child.project = parent;\n            \n\n                resource VpcRouter {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcRouter)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcRouter)\n                    if child.vpc = parent;\n            \n\n                resource InternetGateway {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGateway)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: InternetGateway)\n                    if child.vpc = parent;\n            \n\n                resource InternetGatewayIpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: InternetGateway\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGatewayIpPool)\n                    if has_relation(project, \"containing_project\", child.internet_gateway);\n\n                has_relation(parent: InternetGateway, \"parent\", child: InternetGatewayIpPool)\n                    if child.internet_gateway = parent;\n            \n\n                resource InternetGatewayIpAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: InternetGateway\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGatewayIpAddress)\n                    if has_relation(project, \"containing_project\", child.internet_gateway);\n\n                has_relation(parent: InternetGateway, \"parent\", child: InternetGatewayIpAddress)\n                    if child.internet_gateway = parent;\n            \n\n                resource RouterRoute {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: VpcRouter\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: RouterRoute)\n                    if has_relation(project, \"containing_project\", child.vpc_router);\n\n                has_relation(parent: VpcRouter, \"parent\", child: RouterRoute)\n                    if child.vpc_router = parent;\n            \n\n                resource VpcSubnet {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcSubnet)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcSubnet)\n                    if child.vpc = parent;\n            \n\n                resource FloatingIp {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: FloatingIp)\n                        if child.project = parent;\n            \n\n                resource Image {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: Image)\n                    if child.silo = parent;\n            \n\n                resource SiloImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: SiloImage)\n                    if child.silo = parent;\n            \n\n                resource AddressLot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: AddressLot)\n                    if child.fleet = fleet;\n            \n\n                resource Blueprint {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Blueprint)\n                    if child.fleet = fleet;\n            \n\n                resource LoopbackAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: LoopbackAddress)\n                    if child.fleet = fleet;\n            \n\n\n                resource ConsoleSession {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: ConsoleSession)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAuthRequest {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAuthRequest)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAccessToken {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAccessToken)\n                    if child.fleet = fleet;\n            \n\n                resource PhysicalDisk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: PhysicalDisk)\n                    if child.fleet = fleet;\n            \n\n                resource Rack {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Rack)\n                    if child.fleet = fleet;\n            \n\n                resource RoleBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: RoleBuiltin)\n                    if child.fleet = fleet;\n            \n\n\n\n\n\n                resource SupportBundle {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: SupportBundle)\n                    if child.fleet = fleet;\n            \n\n\n\n                resource Sled {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Sled)\n                    if child.fleet = fleet;\n            \n\n                resource TufRepo {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufRepo)\n                    if child.fleet = fleet;\n            \n\n                resource TufArtifact {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufArtifact)\n                    if child.fleet = fleet;\n            \n\n                resource WebhookEvent {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: WebhookEvent)\n                    if child.fleet = fleet;\n            \n\n                resource WebhookReceiver {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: WebhookReceiver)\n                    if child.fleet = fleet;\n            \n\n\n                resource Zpool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Zpool)\n                    if child.fleet = fleet;\n            \n\n                resource Service {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Service)\n                    if child.fleet = fleet;\n            \n\n                resource UserBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: UserBuiltin)\n                    if child.fleet = fleet;\n            "}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.026711771Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ById(d2cd719f-377c-44ed-89ad-e12e090f069e) }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.026795711Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.026836326Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.026871741Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.027467717Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.034048267Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.034195499Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.034241203Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.03490928Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.037371013Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.046329106Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ById(d2cd719f-377c-44ed-89ad-e12e090f069e) }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.046471879Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ById(d2cd719f-377c-44ed-89ad-e12e090f069e) }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.046585334Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.046681403Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.046770062Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.047948895Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.0511154Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.051264462Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.051393625Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.052137653Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.055482106Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.064062287Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ById(d2cd719f-377c-44ed-89ad-e12e090f069e) }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.064141507Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.064172733Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.064860877Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072437563Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Action"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072505044Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"AnyActor"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072531191Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"AuthenticatedActor"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072555878Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"BlueprintConfig"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072579225Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Database"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072602212Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"DnsConfig"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072625719Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Fleet"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072648266Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Inventory"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072670954Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"IpPoolList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072693291Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"ConsoleSessionList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072715428Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"DeviceAuthRequestList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072737075Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"SiloCertificateList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072787429Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"SiloIdentityProviderList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072832103Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"SiloUserList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.07286004Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"TargetReleaseConfig"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072886377Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"WebhookEventClassList"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072914053Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Project"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.07294045Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Disk"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072968207Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Snapshot"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.072994823Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"ProjectImage"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.073118538Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"AffinityGroup"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.073467574Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"AntiAffinityGroup"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.073514578Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Instance"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.073548664Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"IpPool"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.073629254Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"InstanceNetworkInterface"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075369067Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Vpc"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075412632Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"VpcRouter"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075441058Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"InternetGateway"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075467785Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"InternetGatewayIpPool"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075492642Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"InternetGatewayIpAddress"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075517479Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"RouterRoute"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075542496Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"VpcSubnet"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075567233Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"FloatingIp"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.07559169Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Image"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075630285Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"SiloImage"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.07566848Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"AddressLot"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075694897Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Blueprint"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075719224Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"LoopbackAddress"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075743601Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Certificate"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075769808Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"ConsoleSession"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075795844Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"DeviceAuthRequest"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075820441Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"DeviceAccessToken"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075845648Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"PhysicalDisk"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075870815Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Rack"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075896492Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"RoleBuiltin"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075921689Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"SshKey"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075947375Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Silo"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075972032Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"SiloUser"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.075996599Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"SiloGroup"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076022226Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"SupportBundle"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076048363Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"IdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.07607267Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"SamlIdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076098067Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Sled"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076124743Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"TufRepo"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.07615329Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"TufArtifact"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076184196Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"WebhookEvent"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076214352Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"WebhookReceiver"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076239449Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"WebhookSecret"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076262306Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Zpool"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076283484Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"Service"}
{"msg":"registering Oso class","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076304361Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class":"UserBuiltin"}
{"msg":"full Oso configuration","v":0,"name":"test_iam_roles","level":30,"time":"2025-03-13T18:57:45.076327358Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","config":"#\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system.  All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n    actor.authenticated and\n    has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - \"create_child\": required to create child resources (of any type)\n#\n# - \"list_children\": required to list child resources (of all types) of a\n#   resource\n#\n# - \"modify\": required to modify or delete a resource\n#\n# - \"read\": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project.  The specific roles\n# are oriented around intended use-cases:\n#\n# - \"admin\": has all permissions on the resource\n#\n# - \"collaborator\": has \"read\", \"list_children\", and \"create_child\", plus\n#   the \"admin\" role for child resources.  The idea is that if you're an\n#   Organization Collaborator, you have full control over the Projects within\n#   the Organization, but you cannot modify or delete the Organization itself.\n#\n# - \"viewer\": has \"read\" and \"list_children\" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level.  For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin           (superuser for the whole system)\n# - fleet.collaborator    (can manage Silos)\n# - fleet.viewer          (can read most non-siloed resources in the system)\n# - silo.admin            (superuser for the silo)\n# - silo.collaborator     (can create and own Organizations)\n# - silo.viewer           (can read most resources within the Silo)\n# - organization.admin    (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer   (can read most resources within the Organization)\n# - project.admin         (complete control over a Project)\n# - project.collaborator  (can manage all resources within the Project)\n# - project.viewer        (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below).  We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# \"Fleet\" is a global singleton representing the whole system.  The name comes\n# from the idea described in RFD 24, but it's not quite right.  This probably\n# should be more like \"Region\" or \"AvailabilityZone\".  The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\troles = [\n\t    # Roles that can be attached by users\n\t    \"admin\",\n\t    \"collaborator\",\n\t    \"viewer\",\n\n\t    # Internal-only roles\n\t    \"external-authenticator\"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Permissions implied by roles on this resource's parent (Fleet).  Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo.  To achieve this, we use permission rules here.  (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"collaborator\" on \"parent_fleet\";\n\n\t# external authenticator has to create silo users\n\t\"list_children\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo.  That's\n# not quite the same as having the \"viewer\" role.  For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using \"POST /organizations\", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404.  This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t\"admin\" if \"collaborator\" on \"parent_silo\";\n\t\"viewer\" if \"viewer\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro.  Some resources require custom Polar code.  Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users.  This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"read\" on \"parent_fleet\";\n\t\"read\" if \"read\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n    if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n    if silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { silo_user: SiloUser };\n\n\t\"read\" if \"read\" on \"silo_user\";\n\t\"modify\" if \"modify\" on \"silo_user\";\n}\nhas_relation(user: SiloUser, \"silo_user\", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database.  These are used either at the top level\n# of the API path (e.g., \"/v1/system/ip-pools\") or as an implementation detail of the system\n# (in the case of console sessions and \"Database\").  The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet.  None of these resources defines their own roles.\n#\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t# \"external-authenticator\" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos.  These\n\t# operations necessarily need to read and modify DNS configuration.\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"modify\" if \"external-authenticator\" on \"parent_fleet\";\n\t# \"admin\" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t    \"list_children\", # list blueprints\n\t    \"create_child\",  # create blueprint\n\t    \"read\",          # read the current target\n\t    \"modify\",        # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource TargetReleaseConfig {\n\tpermissions = [\n\t    \"read\",          # read the current target release\n\t    \"modify\",        # change the current target release\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", resource: TargetReleaseConfig)\n\tif resource.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/ip-pools\" in the API\nresource IpPoolList {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list IP Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, \"create_child\", ip_pool: IpPool)\n\tif silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration.  This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on.  This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission.  For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's users.  This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on.  This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission.  For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions.  This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif has_role(actor, \"external-authenticator\", silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with.  Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(_actor: AuthenticatedActor, \"read\", _device_auth: DeviceAuthRequest);\nhas_permission(_actor: AuthenticatedActor, \"modify\", _device_auth: DeviceAuthRequest);\n\nhas_permission(actor: AuthenticatedActor, \"read\", device_token: DeviceAccessToken)\n\tif has_role(actor, \"external-authenticator\", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", identity_provider: IdentityProvider)\n\tif has_role(actor, \"external-authenticator\", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, \"external-authenticator\", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t    # \"query\" is required to perform any query against the database,\n\t    # whether a read or write query.  This is checked when an operation\n\t    # checks out a database connection from the connection pool.\n\t    #\n\t    # Any authenticated user gets this permission.  There's generally\n\t    # some other authz check involved in the database query.  For\n\t    # example, if you're querying the database to \"read\" a \"Project\", we\n\t    # should also be checking that.  So why do we do this at all?  It's\n\t    # a belt-and-suspenders measure so that if we somehow introduced an\n\t    # unauthenticated code path that hits the database, it cannot be\n\t    # used to DoS the database because we won't allow the operation to\n\t    # make the query.  (As long as the code path _is_ authenticated, we\n\t    # can use throttling mechanisms to prevent DoS.)\n\t    \"query\",\n\n\t    # \"modify\" is required to populate database data that's delivered\n\t    # with the system.  It should also be required for schema changes,\n\t    # when we support those.  This is separate from \"query\" so that we\n\t    # cannot accidentally invoke these code paths from API calls and\n\t    # other general functions.\n\t    \"modify\"\n\t];\n}\n\n# All authenticated users have the \"query\" permission on the database.\nhas_permission(_actor: AuthenticatedActor, \"query\", _resource: Database);\n\n# The \"db-init\" user is the only one with the \"modify\" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"modify\", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"create_child\", _resource: IpPoolList);\n# It also has \"admin\" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, \"admin\", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, \"admin\", _silo: Silo);\n\nresource WebhookSecret {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_webhook_receiver: WebhookReceiver };\n\n\t\"read\" if \"read\" on \"parent_webhook_receiver\";\n\t\"modify\" if \"modify\" on \"parent_webhook_receiver\";\n}\n\nhas_relation(rx: WebhookReceiver, \"parent_webhook_receiver\", secret: WebhookSecret)\n\tif secret.webhook_receiver = rx;\n\nresource WebhookEventClassList {\n\tpermissions = [ \"list_children\" ];\n\trelations = { parent_fleet: Fleet };\n\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: WebhookEventClassList)\n\tif collection.fleet = fleet;\n\n\n\n                resource Disk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Disk)\n                        if child.project = parent;\n            \n\n                resource Snapshot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Snapshot)\n                        if child.project = parent;\n            \n\n                resource ProjectImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: ProjectImage)\n                        if child.project = parent;\n            \n\n                resource AffinityGroup {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: AffinityGroup)\n                        if child.project = parent;\n            \n\n                resource AntiAffinityGroup {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: AntiAffinityGroup)\n                        if child.project = parent;\n            \n\n                resource Instance {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Instance)\n                        if child.project = parent;\n            \n\n                resource IpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: IpPool)\n                    if child.fleet = fleet;\n            \n\n                resource InstanceNetworkInterface {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Instance\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InstanceNetworkInterface)\n                    if has_relation(project, \"containing_project\", child.instance);\n\n                has_relation(parent: Instance, \"parent\", child: InstanceNetworkInterface)\n                    if child.instance = parent;\n            \n\n                resource Vpc {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Vpc)\n                        if child.project = parent;\n            \n\n                resource VpcRouter {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcRouter)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcRouter)\n                    if child.vpc = parent;\n            \n\n                resource InternetGateway {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGateway)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: InternetGateway)\n                    if child.vpc = parent;\n            \n\n                resource InternetGatewayIpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: InternetGateway\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGatewayIpPool)\n                    if has_relation(project, \"containing_project\", child.internet_gateway);\n\n                has_relation(parent: InternetGateway, \"parent\", child: InternetGatewayIpPool)\n                    if child.internet_gateway = parent;\n            \n\n                resource InternetGatewayIpAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: InternetGateway\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGatewayIpAddress)\n                    if has_relation(project, \"containing_project\", child.internet_gateway);\n\n                has_relation(parent: InternetGateway, \"parent\", child: InternetGatewayIpAddress)\n                    if child.internet_gateway = parent;\n            \n\n                resource RouterRoute {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: VpcRouter\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: RouterRoute)\n                    if has_relation(project, \"containing_project\", child.vpc_router);\n\n                has_relation(parent: VpcRouter, \"parent\", child: RouterRoute)\n                    if child.vpc_router = parent;\n            \n\n                resource VpcSubnet {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcSubnet)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcSubnet)\n                    if child.vpc = parent;\n            \n\n                resource FloatingIp {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: FloatingIp)\n                        if child.project = parent;\n            \n\n                resource Image {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: Image)\n                    if child.silo = parent;\n            \n\n                resource SiloImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: SiloImage)\n                    if child.silo = parent;\n            \n\n                resource AddressLot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: AddressLot)\n                    if child.fleet = fleet;\n            \n\n                resource Blueprint {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Blueprint)\n                    if child.fleet = fleet;\n            \n\n                resource LoopbackAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: LoopbackAddress)\n                    if child.fleet = fleet;\n            \n\n\n                resource ConsoleSession {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: ConsoleSession)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAuthRequest {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAuthRequest)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAccessToken {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAccessToken)\n                    if child.fleet = fleet;\n            \n\n                resource PhysicalDisk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: PhysicalDisk)\n                    if child.fleet = fleet;\n            \n\n                resource Rack {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Rack)\n                    if child.fleet = fleet;\n            \n\n                resource RoleBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: RoleBuiltin)\n                    if child.fleet = fleet;\n            \n\n\n\n\n\n                resource SupportBundle {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: SupportBundle)\n                    if child.fleet = fleet;\n            \n\n\n\n                resource Sled {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Sled)\n                    if child.fleet = fleet;\n            \n\n                resource TufRepo {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufRepo)\n                    if child.fleet = fleet;\n            \n\n                resource TufArtifact {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufArtifact)\n                    if child.fleet = fleet;\n            \n\n                resource WebhookEvent {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: WebhookEvent)\n                    if child.fleet = fleet;\n            \n\n                resource WebhookReceiver {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: WebhookReceiver)\n                    if child.fleet = fleet;\n            \n\n\n                resource Zpool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Zpool)\n                    if child.fleet = fleet;\n            \n\n                resource Service {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Service)\n                    if child.fleet = fleet;\n            \n\n                resource UserBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: UserBuiltin)\n                    if child.fleet = fleet;\n            "}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.104001749Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Database"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.104173558Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Fleet"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.107303467Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.107417133Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.108399381Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.109145208Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Fleet","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.109235277Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.109274052Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.109308838Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.109981094Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.114063765Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.119595336Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Fleet","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.121770665Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.121825738Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.121868742Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.121908698Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.122919521Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.126599853Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.13239867Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.132452233Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.132484489Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.132516805Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.132546412Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.133022742Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.137503524Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.144947856Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.145018797Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.145045074Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.1455571Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.163499664Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.163570035Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.163900534Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.165623159Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Fleet","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.165673633Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.165708409Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.165741295Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.16634213Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.170626266Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.175925066Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Fleet","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.177045496Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.177098629Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.177138854Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.17717352Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.178261784Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.181292057Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.1842331Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.184305531Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.184335507Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.184363174Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.184389601Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.184802509Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.188545213Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.193132971Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.193197163Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.193232439Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.193873699Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.205629614Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.205789944Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.20670137Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.20742295Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Fleet","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.207560743Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.208727068Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.208886278Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.209727943Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.21384606Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.224323324Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Fleet","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.225746977Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.22580189Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.225841195Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.225873211Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.226628817Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.229781064Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.233228044Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.233287897Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.233321913Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.233350889Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.233381375Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.233836349Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.237095682Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.24080316Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Fleet","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.240861093Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.240894159Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.241595282Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.246948694Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"BlueprintConfig"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.247505115Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"ConsoleSessionList"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.247550709Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"DnsConfig"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.247584055Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"DeviceAuthRequestList"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.247801838Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Inventory"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.247850632Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"IpPoolList"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.247878738Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"TargetReleaseConfig"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.247900736Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Silo"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.249811187Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.249861371Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.250626366Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.252193081Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.252256733Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.252287539Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.252314426Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.253155591Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.255755347Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.25580818Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.255838047Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.256516502Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.259205077Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.279673376Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.286002467Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.28606432Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.286100095Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.286355093Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.287118108Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.290296282Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.290355895Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.29038889Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.291427671Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.295103983Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.300571221Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.300643783Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.300678998Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.300708655Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.300736691Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.301723518Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.305682315Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.305748266Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.305780203Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.306720475Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.310041371Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.313597228Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.313658821Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.313694626Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.314967427Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.323434462Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.324166861Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.326004232Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.327099546Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.327234689Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.327289122Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.327380431Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.329258137Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.333354576Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.333440585Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.3334809Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.335290765Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.345286759Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.35466638Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.356872645Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.357564399Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.357664676Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.357840235Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.360337503Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.363633393Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.363792843Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.363826608Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.370385911Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.375271872Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.381598144Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.381667435Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.38170489Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.381739436Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.381768722Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.382472275Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.385352766Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.385511786Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.38555875Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.386223677Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.389496729Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.393111999Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.39318021Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.393214836Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.39382056Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.401499663Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.401595231Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.402846666Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.403477917Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.403622749Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.403670173Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.403699779Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.404286616Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.407360163Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.407633309Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.407716049Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.408378746Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.411326559Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.418907154Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.422297431Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.422365183Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.422401318Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.422433965Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.423372997Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.426224522Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.426278255Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.426336398Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.427069657Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.430233393Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.436923819Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.437041594Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.437143151Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.437182267Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.437215532Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.438744102Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.444182614Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.444239587Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.444275363Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.445430659Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.45215986Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.45625355Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.456357107Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.456401881Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.456946903Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.461935831Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloCertificateList"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.46211003Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Certificate"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.462167123Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloIdentityProviderList"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.462256232Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"IdentityProvider"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.462306605Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SamlIdentityProvider"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.462368028Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloUserList"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.462394154Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloUser"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.462418182Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SshKey"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.462441448Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloGroup"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.462464546Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloImage"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.462487833Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Image"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.46251075Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Project"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.464664382Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.464704546Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.465623802Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.466288159Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.466341253Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"894717ee-e3c0-4706-8278-657fe11407d0","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.466370849Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.466397275Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.467051734Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.469791072Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.469917067Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.469948513Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.470587743Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.473161803Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.473214986Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.473244422Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.473964752Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.47759716Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.490221137Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.491432475Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.491488948Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"894717ee-e3c0-4706-8278-657fe11407d0","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.491521344Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.491548791Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.492460497Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.495302263Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.495361156Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.495496979Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.496279981Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.498925412Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.498978005Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.499012891Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.499760937Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.502690172Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.510196457Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.51033289Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.510452645Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"894717ee-e3c0-4706-8278-657fe11407d0","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.510555702Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.510665179Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.511610251Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.519664187Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.51972152Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.519810549Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.521531175Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.525189968Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.525249761Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.525284417Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.526163177Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.531030121Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.537008396Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.537090965Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.537127751Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.53769729Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.546137198Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.546248704Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.547353776Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.548055659Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.548110452Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"894717ee-e3c0-4706-8278-657fe11407d0","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.54844547Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.548893465Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.549948223Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.554133381Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.554523913Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.554564798Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.555121248Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.558486519Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.558541552Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.558585457Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.55951713Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.660517733Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.673757303Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.675105005Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.675173097Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"894717ee-e3c0-4706-8278-657fe11407d0","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.675206743Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.675234149Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.675939131Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.678769529Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.678978962Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.679026207Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.679913616Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.682674472Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.682734445Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.68276912Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.683591268Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.686415036Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.692809549Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.692875011Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.693014253Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"894717ee-e3c0-4706-8278-657fe11407d0","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.693053339Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.693083165Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.693436111Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.696588648Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.696644101Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.696679157Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.697282712Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.700110039Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.700160163Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.700193719Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.700761608Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.703664196Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.714674924Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.714748915Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.71478848Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.715324233Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.72344896Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.723511413Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.726518028Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.72754432Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.727654296Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"894717ee-e3c0-4706-8278-657fe11407d0","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.727701641Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.727735646Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.728800693Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.732157345Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.732229426Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.732269581Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.73292293Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.736541979Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.736606731Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.736647515Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.737248751Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.740443502Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.752783165Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ReadPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.755646488Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.75571405Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"894717ee-e3c0-4706-8278-657fe11407d0","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.755757564Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.75579259Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.756421381Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.769088763Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.769222276Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.769331022Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.770248108Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.777472488Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.778265809Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.778483412Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.779369781Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.786464606Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.802310182Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.802373874Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.802409519Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"894717ee-e3c0-4706-8278-657fe11407d0","resource_type":"Project","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.802442275Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.802471591Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.807530591Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.812887593Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"d2cd719f-377c-44ed-89ad-e12e090f069e","resource_type":"Silo","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.812969123Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.813010028Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.816491754Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.824944731Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.825011982Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.825047938Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.826282114Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.839066931Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\"), (Silo, d2cd719f-377c-44ed-89ad-e12e090f069e, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.846300069Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: d2cd719f-377c-44ed-89ad-e12e090f069e, lookup_type: ByName(\"silo1\") }, key: 894717ee-e3c0-4706-8278-657fe11407d0, lookup_type: ByName(\"silo1-proj1\") }","action":"ModifyPolicy","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_iam_roles","level":10,"time":"2025-03-13T18:57:45.84637391Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.846410575Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.847012351Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007, silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852185986Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Disk"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852238779Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AffinityGroup"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852264896Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AntiAffinityGroup"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852290033Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Instance"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852318259Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InstanceNetworkInterface"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852344756Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Vpc"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852367703Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"VpcSubnet"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.85239012Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Snapshot"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852515615Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"ProjectImage"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852563599Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"FloatingIp"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852592965Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGateway"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852621711Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGatewayIpPool"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852649138Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGatewayIpAddress"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852677745Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Project"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852704841Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Disk"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852731278Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AffinityGroup"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852757515Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AntiAffinityGroup"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852785991Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Instance"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852813497Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InstanceNetworkInterface"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852839144Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Vpc"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852864541Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"VpcSubnet"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852890388Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Snapshot"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852916375Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"ProjectImage"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852942132Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"FloatingIp"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852970078Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGateway"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.852997774Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGatewayIpPool"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853023381Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGatewayIpAddress"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853049868Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Silo"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853076615Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloCertificateList"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853102692Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Certificate"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853129438Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloIdentityProviderList"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853156525Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"IdentityProvider"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853182242Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SamlIdentityProvider"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853207858Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloUserList"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853234265Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloUser"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853261412Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SshKey"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853288098Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloGroup"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853315135Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloImage"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853340712Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Image"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853441899Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Project"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853476615Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Disk"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853504451Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AffinityGroup"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853530948Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AntiAffinityGroup"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853557415Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Instance"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853583921Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InstanceNetworkInterface"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853611618Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Vpc"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853638235Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"VpcSubnet"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853665681Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Snapshot"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853693348Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"ProjectImage"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853720104Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"FloatingIp"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853746811Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGateway"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853774498Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGatewayIpPool"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853801025Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGatewayIpAddress"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853828291Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Rack"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853854898Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Sled"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853881604Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Zpool"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853907741Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Service"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853932758Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Service"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853959335Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"PhysicalDisk"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.853985362Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SupportBundle"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854011768Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"DeviceAuthRequest"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854036735Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"DeviceAccessToken"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854061032Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Blueprint"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854085669Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"TufRepo"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854111986Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"TufArtifact"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854138092Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AddressLot"}
{"msg":"covering","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854164429Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"LoopbackAddress"}
{"msg":"exempt","v":0,"name":"test_iam_roles","level":40,"time":"2025-03-13T18:57:45.854190556Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Action"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854217542Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AddressLot"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854244389Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AffinityGroup"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854270086Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AntiAffinityGroup"}
{"msg":"exempt","v":0,"name":"test_iam_roles","level":40,"time":"2025-03-13T18:57:45.854296373Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AnyActor"}
{"msg":"exempt","v":0,"name":"test_iam_roles","level":40,"time":"2025-03-13T18:57:45.854323659Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"AuthenticatedActor"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854349756Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Blueprint"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854374453Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"BlueprintConfig"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.85439954Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Certificate"}
{"msg":"exempt","v":0,"name":"test_iam_roles","level":40,"time":"2025-03-13T18:57:45.854426887Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"ConsoleSession"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854452393Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"ConsoleSessionList"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.85447813Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Database"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854504627Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"DeviceAccessToken"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854529154Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"DeviceAuthRequest"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.85455597Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"DeviceAuthRequestList"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854582047Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Disk"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854607074Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"DnsConfig"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854632991Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Fleet"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854657748Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"FloatingIp"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854684784Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"IdentityProvider"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854713041Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Image"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854739557Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Instance"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854765494Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InstanceNetworkInterface"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854793941Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGateway"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854822337Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGatewayIpAddress"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854848674Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"InternetGatewayIpPool"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854875531Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Inventory"}
{"msg":"exempt","v":0,"name":"test_iam_roles","level":40,"time":"2025-03-13T18:57:45.854900677Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"IpPool"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854924734Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"IpPoolList"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.854949271Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"LoopbackAddress"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855010494Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"PhysicalDisk"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855052738Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Project"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855080345Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"ProjectImage"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855106882Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Rack"}
{"msg":"exempt","v":0,"name":"test_iam_roles","level":40,"time":"2025-03-13T18:57:45.855133368Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"RoleBuiltin"}
{"msg":"exempt","v":0,"name":"test_iam_roles","level":40,"time":"2025-03-13T18:57:45.855160885Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"RouterRoute"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855187312Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SamlIdentityProvider"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855214458Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Service"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855241255Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Silo"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855267212Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloCertificateList"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855293359Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloGroup"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855321025Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloIdentityProviderList"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855347682Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloImage"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855375178Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloUser"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855402505Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SiloUserList"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855429522Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Sled"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855456598Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Snapshot"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855482325Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SshKey"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855517851Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"SupportBundle"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855547507Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"TargetReleaseConfig"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855574033Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"TufArtifact"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.85559931Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"TufRepo"}
{"msg":"exempt","v":0,"name":"test_iam_roles","level":40,"time":"2025-03-13T18:57:45.855623767Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"UserBuiltin"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855650454Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Vpc"}
{"msg":"exempt","v":0,"name":"test_iam_roles","level":40,"time":"2025-03-13T18:57:45.855675971Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"VpcRouter"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855700878Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"VpcSubnet"}
{"msg":"uncovered class","v":0,"name":"test_iam_roles","level":50,"time":"2025-03-13T18:57:45.855726265Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"WebhookEvent"}
{"msg":"uncovered class","v":0,"name":"test_iam_roles","level":50,"time":"2025-03-13T18:57:45.855754291Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"WebhookEventClassList"}
{"msg":"uncovered class","v":0,"name":"test_iam_roles","level":50,"time":"2025-03-13T18:57:45.855781368Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"WebhookReceiver"}
{"msg":"uncovered class","v":0,"name":"test_iam_roles","level":50,"time":"2025-03-13T18:57:45.855806775Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"WebhookSecret"}
{"msg":"covered","v":0,"name":"test_iam_roles","level":20,"time":"2025-03-13T18:57:45.855832411Z","hostname":"w-01JP8BJPKS3GN7ZYTTJ4F0C973","pid":16889,"component":"IamTestCoverage","class_name":"Zpool"}