{"msg":"cockroach temporary directory: /var/tmp/omicron_tmp/.tmp2m9Oy9","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:41.774698948Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"cockroach: copying from seed tarball (/var/tmp/omicron_tmp/crdb-base-build/101685ec78369c386269c05492799c4bd4db687e9291746781d58d5b81b12267.tar) to storage directory (/var/tmp/omicron_tmp/.tmp2m9Oy9/data)","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:41.774758158Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"cockroach command line: cockroach start-single-node --insecure --http-addr=:0 --store=path=/var/tmp/omicron_tmp/.tmp2m9Oy9/data,ballast-size=0 --listen-addr [::1]:0 --listening-url-file /var/tmp/omicron_tmp/.tmp2m9Oy9/listen-url --max-sql-memory 256MiB","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:41.789215229Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"cockroach environment: BUILDOMAT_JOB_ID=01KP98GTQY2E3M4MXR03G04Z92 BUILDOMAT_TASK_ID=4 CARGO=/home/build/.rustup/toolchains/1.94.0-x86_64-unknown-linux-gnu/bin/cargo CARGO_HOME=/home/build/.cargo CARGO_INCREMENTAL=0 CARGO_MANIFEST_DIR=/work/oxidecomputer/omicron/nexus/db-queries CARGO_PKG_AUTHORS= CARGO_PKG_DESCRIPTION= CARGO_PKG_HOMEPAGE= CARGO_PKG_LICENSE=MPL-2.0 CARGO_PKG_LICENSE_FILE= CARGO_PKG_NAME=nexus-db-queries CARGO_PKG_REPOSITORY= CARGO_PKG_RUST_VERSION= CARGO_PKG_VERSION=0.1.0 CARGO_PKG_VERSION_MAJOR=0 CARGO_PKG_VERSION_MINOR=1 CARGO_PKG_VERSION_PATCH=0 CARGO_PKG_VERSION_PRE= CARGO_TERM_COLOR=always CI=true CRDB_SEED_TAR=/var/tmp/omicron_tmp/crdb-base-build/101685ec78369c386269c05492799c4bd4db687e9291746781d58d5b81b12267.tar GITHUB_BRANCH=eliza/oxide-tokio-rt-1.52 GITHUB_REF=refs/heads/eliza/oxide-tokio-rt-1.52 GITHUB_REPOSITORY=oxidecomputer/omicron GITHUB_SHA=07e99e2580657d8052a7b8df90f582e16d63013e GOTRACEBACK=crash HOME=/home/build LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8 LD_LIBRARY_PATH=/work/oxidecomputer/omicron/target/debug/build/aws-lc-sys-fb051aeb2b17e35f/out:/work/oxidecomputer/omicron/target/debug/build/blake3-e7d5dafa22e01160/out:/work/oxidecomputer/omicron/target/debug/build/bzip2-sys-370f4901f9604474/out/lib:/work/oxidecomputer/omicron/target/debug/build/libgit2-sys-df14b9b70bf15a58/out/build:/work/oxidecomputer/omicron/target/debug/build/libz-sys-17cb3ed35c0d03af/out/lib:/work/oxidecomputer/omicron/target/debug/build/psm-24937e91980fe140/out:/work/oxidecomputer/omicron/target/debug/build/ring-1e975b585923a495/out:/work/oxidecomputer/omicron/target/debug/build/tofino-d5fb88cfa8ad538d/out:/work/oxidecomputer/omicron/target/debug/build/zstd-sys-f4d39d68bcef47fc/out:/work/oxidecomputer/omicron/target/debug/deps:/work/oxidecomputer/omicron/target/debug:/home/build/.rustup/toolchains/1.94.0-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/lib:/home/build/.rustup/toolchains/1.94.0-x86_64-unknown-linux-gnu/lib LOGNAME=build NEXTEST=1 NEXTEST_ATTEMPT=1 NEXTEST_ATTEMPT_ID=6ea3b84c-821a-4e74-893c-abf5a45eae8b:nexus-db-queries$db::datastore::audit_log::tests::test_audit_log_basic NEXTEST_BINARY_ID=nexus-db-queries NEXTEST_EXECUTION_MODE=process-per-test NEXTEST_LD_LIBRARY_PATH=/work/oxidecomputer/omicron/target/debug/build/aws-lc-sys-fb051aeb2b17e35f/out:/work/oxidecomputer/omicron/target/debug/build/blake3-e7d5dafa22e01160/out:/work/oxidecomputer/omicron/target/debug/build/bzip2-sys-370f4901f9604474/out/lib:/work/oxidecomputer/omicron/target/debug/build/libgit2-sys-df14b9b70bf15a58/out/build:/work/oxidecomputer/omicron/target/debug/build/libz-sys-17cb3ed35c0d03af/out/lib:/work/oxidecomputer/omicron/target/debug/build/psm-24937e91980fe140/out:/work/oxidecomputer/omicron/target/debug/build/ring-1e975b585923a495/out:/work/oxidecomputer/omicron/target/debug/build/tofino-d5fb88cfa8ad538d/out:/work/oxidecomputer/omicron/target/debug/build/zstd-sys-f4d39d68bcef47fc/out:/work/oxidecomputer/omicron/target/debug/deps:/work/oxidecomputer/omicron/target/debug:/home/build/.rustup/toolchains/1.94.0-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/lib:/home/build/.rustup/toolchains/1.94.0-x86_64-unknown-linux-gnu/lib NEXTEST_PROFILE=ci NEXTEST_RECOMMENDED_VERSION=0.9.131 NEXTEST_REQUIRED_VERSION=0.9.131 NEXTEST_RUN_ID=6ea3b84c-821a-4e74-893c-abf5a45eae8b NEXTEST_RUN_MODE=test NEXTEST_STATE_DIR=/tmp/nextest-state.1SSHcn NEXTEST_STRESS_CURRENT=none NEXTEST_STRESS_TOTAL=none NEXTEST_TEST_GLOBAL_SLOT=7 NEXTEST_TEST_GROUP=@global NEXTEST_TEST_GROUP_SLOT=none NEXTEST_TEST_NAME=db::datastore::audit_log::tests::test_audit_log_basic NEXTEST_TEST_PHASE=run NEXTEST_TEST_THREADS=14 NEXTEST_TOTAL_ATTEMPTS=3 NEXTEST_VERSION=0.9.131 NEXTEST_WORKSPACE_ROOT=/work/oxidecomputer/omicron OUT_DIR=/work/oxidecomputer/omicron/target/debug/build/nexus-db-queries-4469469e21fe731b/out PATH=/work/oxidecomputer/omicron/out/mgd/root/opt/oxide/mgd/bin:/work/oxidecomputer/omicron/out/dendrite-stub/bin:/work/oxidecomputer/omicron/out/clickhouse:/work/oxidecomputer/omicron/out/cockroachdb/bin:/home/build/.cargo/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/ooce/bin:/opt/ooce/sbin PWD=/work/oxidecomputer/omicron RUSTC_BOOTSTRAP=1 RUSTDOCFLAGS=--document-private-items -D warnings RUSTFLAGS=--cfg tokio_unstable -D warnings RUSTUP_HOME=/home/build/.rustup RUSTUP_TOOLCHAIN=1.94.0-x86_64-unknown-linux-gnu RUSTUP_TOOLCHAIN_SOURCE=toolchain-file RUST_BACKTRACE=1 RUST_RECURSION_COUNT=1 SHLVL=1 SSL_CERT_DIR=/usr/lib/ssl/certs SSL_CERT_FILE=/usr/lib/ssl/certs/ca-certificates.crt TMPDIR=/var/tmp/omicron_tmp TZ=UTC USER=build","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:41.78931461Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"cockroach pid: 66796","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:42.820858422Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"cockroach listen URL: postgresql://root@[::1]:37839/omicron?sslmode=disable","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:42.820897232Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"registered USDT probes","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:42.82338957Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"Database schema version is up to date","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.094811819Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"desired_version":"250.0.0","found_version":"250.0.0","component":"datastore"}
{"msg":"Datastore is ready for usage","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.09485653Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095124821Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Action"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095135372Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AuditLog"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095146662Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AnyActor"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095156632Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AuthenticatedActor"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095168842Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"BlueprintConfig"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095198182Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Database"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095207012Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"DnsConfig"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095216882Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Fleet"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095226812Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Inventory"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095240882Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"IpPoolList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095248692Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"VpcList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095257362Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ConsoleSessionList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095266002Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"DeviceAuthRequestList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095274542Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"QuiesceState"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095286073Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloCertificateList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095295953Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloGroupList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095304943Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloIdentityProviderList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095323703Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloUserList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095332523Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloUserSessionList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095341233Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloUserTokenList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095350103Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SubnetPoolList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095361823Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"UpdateTrustRootList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095371093Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"TargetReleaseConfig"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095379393Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AlertClassList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095387713Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ScimClientBearerTokenList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095396143Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"MulticastGroupList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095404763Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"TrustQuorumConfig"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095531264Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Project"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095540794Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Disk"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095559105Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Snapshot"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095569575Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ProjectImage"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095579265Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AffinityGroup"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095595595Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AntiAffinityGroup"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095604315Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Instance"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095624725Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"IpPool"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095633735Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"InstanceNetworkInterface"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095643245Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Vpc"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095655075Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"VpcRouter"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095663425Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"InternetGateway"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095671615Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"InternetGatewayIpPool"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095680575Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"InternetGatewayIpAddress"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095689605Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"RouterRoute"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095704356Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"VpcSubnet"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095713606Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"FloatingIp"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095726646Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ExternalSubnet"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095734496Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Image"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095742836Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloImage"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095751036Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AddressLot"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095758436Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Blueprint"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095767486Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"LoopbackAddress"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095778336Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Certificate"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095787776Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ConsoleSession"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095797636Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"DeviceAuthRequest"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095815126Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"DeviceAccessToken"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095824456Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"PhysicalDisk"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095841937Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Rack"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095850707Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SshKey"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095859587Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Silo"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095879027Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloUser"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095887487Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloGroup"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095897057Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SupportBundle"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095905877Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"IdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095914347Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SamlIdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095923847Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Sled"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095933317Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SubnetPool"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095942987Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"TufRepo"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095951427Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"TufArtifact"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095960267Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"TufTrustRoot"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095968497Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Alert"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095975987Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AlertReceiver"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095984698Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"WebhookSecret"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.095992768Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Zpool"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.096006368Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Service"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.096016788Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"UserBuiltin"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.096024658Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ScimClientBearerToken"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.096032308Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"MulticastGroup"}
{"msg":"full Oso configuration","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.096040568Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"config":"#\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system.  All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n    actor.authenticated and\n    has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - \"create_child\": required to create child resources (of any type)\n#\n# - \"list_children\": required to list child resources (of all types) of a\n#   resource\n#\n# - \"modify\": required to modify or delete a resource\n#\n# - \"read\": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project.  The specific roles\n# are oriented around intended use-cases:\n#\n# - \"admin\": has all permissions on the resource\n#\n# - \"collaborator\": has \"read\", \"list_children\", and \"create_child\", plus\n#   the \"admin\" role for child resources.  The idea is that if you're an\n#   Organization Collaborator, you have full control over the Projects within\n#   the Organization, but you cannot modify or delete the Organization itself.\n#\n# - \"viewer\": has \"read\" and \"list_children\" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level.  For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin           (superuser for the whole system)\n# - fleet.collaborator    (can manage Silos)\n# - fleet.viewer          (can read most non-siloed resources in the system)\n# - silo.admin            (superuser for the silo)\n# - silo.collaborator     (can create and own Organizations; grants project.admin on all projects)\n# - silo.limited-collaborator (grants project.limited-collaborator on all projects)\n# - silo.viewer           (can read most resources within the Silo; grants project.viewer)\n# - organization.admin    (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer   (can read most resources within the Organization)\n# - project.admin         (complete control over a Project)\n# - project.collaborator  (can manage all resources within the Project, including networking)\n# - project.limited-collaborator (can manage compute resources, but not networking resources)\n# - project.viewer        (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below).  We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# \"Fleet\" is a global singleton representing the whole system.  The name comes\n# from the idea described in RFD 24, but it's not quite right.  This probably\n# should be more like \"Region\" or \"AvailabilityZone\".  The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\troles = [\n\t    # Roles that can be attached by users\n\t    \"admin\",\n\t    \"collaborator\",\n\t    \"viewer\",\n\n\t    # Internal-only roles\n\t    \"external-authenticator\"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\n# Note that certain Actors may not ever have any roles assigned to them, like\n# SCIM Actors.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"limited-collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"limited-collaborator\";\n\t\"limited-collaborator\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Permissions implied by roles on this resource's parent (Fleet).  Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo.  To achieve this, we use permission rules here.  (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"collaborator\" on \"parent_fleet\";\n\n\t# external authenticator has to create silo users\n\t\"list_children\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo.  That's\n# not quite the same as having the \"viewer\" role.  For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using \"POST /organizations\", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404.  This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif actor.is_user and silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"limited-collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t# Role hierarchy: admin > collaborator > limited-collaborator > viewer\n\t#\n\t# The \"limited-collaborator\" role can create/modify non-networking\n\t# resources (instances, disks, etc.) but cannot create/modify networking\n\t# infrastructure (VPCs, subnets, routers, internet gateways).\n\t# See nexus/authz-macros for InProjectLimited vs InProjectFull.\n\t\"viewer\" if \"limited-collaborator\";\n\t\"limited-collaborator\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"limited-collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t\"admin\" if \"collaborator\" on \"parent_silo\";\n\t\"limited-collaborator\" if \"limited-collaborator\" on \"parent_silo\";\n\t\"viewer\" if \"viewer\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro.  Some resources require custom Polar code.  Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users.  This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"read\" on \"parent_fleet\";\n\t\"read\" if \"read\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n    if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n    if actor.is_user and silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { silo_user: SiloUser };\n\n\t\"read\" if \"read\" on \"silo_user\";\n}\n# We want to allow the user to modify the ssh key but disallow a SCIM IdP token\n# from doing the same.\nhas_permission(actor: AuthenticatedActor, \"modify\", ssh_key: SshKey)\n\tif actor.is_user and has_permission(actor, \"modify\", ssh_key.silo_user);\nhas_relation(user: SiloUser, \"silo_user\", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource ScimClientBearerToken {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n    # necessary to authenticate SCIM actors\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\n\t# Silo-level roles grant privileges for SCIM client tokens.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges for SCIM client tokens.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", scim_client_bearer_token: ScimClientBearerToken)\n\tif scim_client_bearer_token.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ScimClientBearerToken)\n\tif collection.silo.fleet = fleet;\n\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database.  These are used either at the top level\n# of the API path (e.g., \"/v1/system/ip-pools\") or as an implementation detail of the system\n# (in the case of console sessions and \"Database\").  The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet.  None of these resources defines their own roles.\n#\n\n# Describes the quiesce state of a particular Nexus instance.\n#\n# These authz checks must not require the database.  We grant this directly to\n# callers of the internal API.\nresource QuiesceState {\n\tpermissions = [ \"read\", \"modify\" ];\n}\nhas_permission(USER_INTERNAL_API: AuthenticatedActor, \"read\", _q: QuiesceState);\nhas_permission(\n    USER_INTERNAL_API: AuthenticatedActor,\n    \"modify\",\n    _q: QuiesceState\n);\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t# \"external-authenticator\" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos.  These\n\t# operations necessarily need to read and modify DNS configuration.\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"modify\" if \"external-authenticator\" on \"parent_fleet\";\n\t# \"admin\" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t    \"list_children\", # list blueprints\n\t    \"create_child\",  # create blueprint\n\t    \"read\",          # read the current target\n\t    \"modify\",        # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/update/trust-roots\" in the API\nresource UpdateTrustRootList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: UpdateTrustRootList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource TargetReleaseConfig {\n\tpermissions = [\n\t    \"read\",          # read the current target release\n\t    \"modify\",        # change the current target release\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", resource: TargetReleaseConfig)\n\tif resource.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/ip-pools\" in the API\nresource IpPoolList {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list IP Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, \"create_child\", ip_pool: IpPool)\n\tif actor.is_user and silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for accessing \"/v1/multicast-groups\" in the API\n# Groups are created when the first instance joins and deleted when the last leaves.\nresource MulticastGroupList {\n\tpermissions = [ \"list_children\" ];\n\n\trelations = { parent_fleet: Fleet };\n\n\t# Fleet Viewers can list multicast groups\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", multicast_group_list: MulticastGroupList)\n\tif multicast_group_list.fleet = fleet;\n\n# Any authenticated user can list multicast groups in their fleet.\n# This enables silo users to discover groups for attaching instances,\n# without requiring the Fleet::Viewer role.\nhas_permission(actor: AuthenticatedActor, \"list_children\", multicast_group_list: MulticastGroupList)\n\tif actor.is_user and silo in actor.silo and silo.fleet = multicast_group_list.fleet;\n\n# MulticastGroup is a fleet-level discovery resource.\n# Join/leave authorization is gated by Instance::Modify, not the group itself.\nresource MulticastGroup {\n\tpermissions = [ \"read\", \"list_children\" ];\n\trelations = { parent_fleet: Fleet };\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", multicast_group: MulticastGroup)\n\tif multicast_group.fleet = fleet;\n\n# Any authenticated user can read multicast groups in their fleet\nhas_permission(actor: AuthenticatedActor, \"read\", multicast_group: MulticastGroup)\n\tif actor.is_user and silo in actor.silo and silo.fleet = multicast_group.fleet;\n\n# Any authenticated user can list members of multicast groups in their fleet\nhas_permission(actor: AuthenticatedActor, \"list_children\", multicast_group: MulticastGroup)\n\tif actor.is_user and silo in actor.silo and silo.fleet = multicast_group.fleet;\n\n# Describes the policy for reading and writing the audit log\nresource AuditLog {\n\tpermissions = [\n\t    \"list_children\", # retrieve audit log\n\t    \"create_child\",  # create audit log entry\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\n\t# Fleet viewers can read the audit log\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\n\n# Any actor should be able to write to the audit log because we need to be able\n# to write to the log from any request, authenticated or not. Audit log writes\n# are always a byproduct of other operations: there are no endpoints that allow\n# the user to write to the log deliberately. Note we use AuthenticatedActor\n# because we don't really mean unauthenticated -- in the case of login\n# operations, we use the external authenticator actor that creates the session\n# to authorize the audit log write.\nhas_permission(_actor: AuthenticatedActor, \"create_child\", _audit_log: AuditLog);\n\nhas_relation(fleet: Fleet, \"parent_fleet\", audit_log: AuditLog)\n\tif audit_log.fleet = fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Allow silo admins to delete and list user sessions\nresource SiloUserSessionList {\n    permissions = [ \"modify\", \"list_children\" ];\n    relations = { parent_silo: Silo };\n\n    # A silo admin can modify (e.g., delete) a user's sessions.\n    \"modify\" if \"admin\" on \"parent_silo\";\n\n    # A silo admin can list a user's sessions.\n    \"list_children\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", authn_list: SiloUserSessionList)\n    if authn_list.silo_user.silo = silo;\n\n# give users 'modify' and 'list_children' on their own sessions\nhas_permission(actor: AuthenticatedActor, \"modify\", authn_list: SiloUserSessionList)\n    if actor.equals_silo_user(authn_list.silo_user);\nhas_permission(actor: AuthenticatedActor, \"list_children\", authn_list: SiloUserSessionList)\n    if actor.equals_silo_user(authn_list.silo_user);\n\n# Allow silo admins to delete and list user access tokens\nresource SiloUserTokenList {\n    permissions = [ \"modify\", \"list_children\" ];\n    relations = { parent_silo: Silo };\n\n    # A silo admin can modify (e.g., delete) a user's tokens.\n    \"modify\" if \"admin\" on \"parent_silo\";\n\n    # A silo admin can list a user's tokens.\n    \"list_children\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", authn_list: SiloUserTokenList)\n    if authn_list.silo_user.silo = silo;\n\n# give users 'modify' and 'list_children' on their own tokens\nhas_permission(actor: AuthenticatedActor, \"modify\", authn_list: SiloUserTokenList)\n    if actor.equals_silo_user(authn_list.silo_user);\nhas_permission(actor: AuthenticatedActor, \"list_children\", authn_list: SiloUserTokenList)\n    if actor.equals_silo_user(authn_list.silo_user);\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing trust quorum configurations\n# This may change in a multirack future to a per rack parent\nresource TrustQuorumConfig {\n    permissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", config: TrustQuorumConfig)\n\tif config.rack.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration.  This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on.  This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission.  For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's users.  This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on.  This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission.  For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# Grant SCIM IdP actors the permissions they need on users.\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n    if actor.is_scim_idp and silo_user.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"create_child\", silo_user_list: SiloUserList)\n\tif actor.is_scim_idp and silo_user_list.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"modify\", silo_user: SiloUser)\n\tif actor.is_scim_idp and silo_user.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"list_children\", silo_user_list: SiloUserList)\n    if actor.is_scim_idp and silo_user_list.silo in actor.silo;\n\n# Describes the policy for creating and managing Silo groups (mostly intended\n# for API-managed groups)\nresource SiloGroupList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the groups in the\n\t# Silo) can see the groups in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's groups.  This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on.  This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission.  For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloGroupList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloGroupList)\n\tif collection.silo.fleet = fleet;\n\n# Grant SCIM IdP actors the permissions they need on groups.\nhas_permission(actor: AuthenticatedActor, \"read\", silo_group: SiloGroup)\n    if actor.is_scim_idp and silo_group.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"create_child\", silo_group_list: SiloGroupList)\n\tif actor.is_scim_idp and silo_group_list.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"modify\", silo_group: SiloGroup)\n\tif actor.is_scim_idp and silo_group.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"list_children\", silo_group_list: SiloGroupList)\n    if actor.is_scim_idp and silo_group_list.silo in actor.silo;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions.  This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif has_role(actor, \"external-authenticator\", silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with.  Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(actor: AuthenticatedActor, \"read\", _device_auth: DeviceAuthRequest)\n    if actor.is_user;\nhas_permission(actor: AuthenticatedActor, \"modify\", _device_auth: DeviceAuthRequest)\n    if actor.is_user;\n\nhas_permission(actor: AuthenticatedActor, \"read\", device_token: DeviceAccessToken)\n\tif has_role(actor, \"external-authenticator\", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", identity_provider: IdentityProvider)\n\tif has_role(actor, \"external-authenticator\", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, \"external-authenticator\", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t    # \"query\" is required to perform any query against the database,\n\t    # whether a read or write query.  This is checked when an operation\n\t    # checks out a database connection from the connection pool.\n\t    #\n\t    # Any authenticated user gets this permission.  There's generally\n\t    # some other authz check involved in the database query.  For\n\t    # example, if you're querying the database to \"read\" a \"Project\", we\n\t    # should also be checking that.  So why do we do this at all?  It's\n\t    # a belt-and-suspenders measure so that if we somehow introduced an\n\t    # unauthenticated code path that hits the database, it cannot be\n\t    # used to DoS the database because we won't allow the operation to\n\t    # make the query.  (As long as the code path _is_ authenticated, we\n\t    # can use throttling mechanisms to prevent DoS.)\n\t    \"query\",\n\n\t    # \"modify\" is required to populate database data that's delivered\n\t    # with the system.  It should also be required for schema changes,\n\t    # when we support those.  This is separate from \"query\" so that we\n\t    # cannot accidentally invoke these code paths from API calls and\n\t    # other general functions.\n\t    \"modify\"\n\t];\n}\n\n# All authenticated users have the \"query\" permission on the database.\nhas_permission(_actor: AuthenticatedActor, \"query\", _resource: Database);\n\n# The \"db-init\" user is the only one with the \"modify\" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"modify\", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"create_child\", _resource: IpPoolList);\n# It also has \"admin\" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, \"admin\", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, \"admin\", _silo: Silo);\n\nresource WebhookSecret {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_alert_receiver: AlertReceiver };\n\n\t\"read\" if \"read\" on \"parent_alert_receiver\";\n\t\"modify\" if \"modify\" on \"parent_alert_receiver\";\n}\n\nhas_relation(rx: AlertReceiver, \"parent_alert_receiver\", secret: WebhookSecret)\n\tif secret.alert_receiver = rx;\n\nresource AlertClassList {\n\tpermissions = [ \"list_children\" ];\n\trelations = { parent_fleet: Fleet };\n\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: AlertClassList)\n\tif collection.fleet = fleet;\n\nresource ScimClientBearerTokenList {\n\tpermissions = [ \"create_child\", \"list_children\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges for SCIM client tokens.\n    # These are all admin because being able to create these tokens would allow\n    # a user to grant themselves admin by modifying group membership through SCIM calls\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\n    # Fleet-level roles also grant privileges for SCIM client tokens, for\n    # configuration before silo admins are present.\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", scim_client_bearer_token_list: ScimClientBearerTokenList)\n\tif scim_client_bearer_token_list.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ScimClientBearerTokenList)\n\tif collection.silo.fleet = fleet;\n\n# VpcList is a synthetic resource for controlling VPC creation.\n# Unlike other project resources, VPC creation requires the full \"collaborator\"\n# role rather than \"limited-collaborator\", enforcing the networking restriction.\n# This allows organizations to restrict who can reconfigure the network topology\n# while still allowing users with limited-collaborator to work with compute\n# resources (instances, disks, etc.) within the existing network.\nresource VpcList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { containing_project: Project };\n\n\t\"list_children\" if \"read\" on \"containing_project\";\n\t\"create_child\" if \"collaborator\" on \"containing_project\";\n}\nhas_relation(project: Project, \"containing_project\", collection: VpcList)\n\tif collection.project = project;\n\n# Describes the policy for accessing \"/v1/system/subnet-pools\" in the API\nresource SubnetPoolList {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the Subnet Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list External Subnet Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", subnet_pool_list: SubnetPoolList)\n\tif subnet_pool_list.fleet = fleet;\n\n\n\n                resource Disk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Disk)\n                        if child.project = parent;\n            \n\n                resource Snapshot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Snapshot)\n                        if child.project = parent;\n            \n\n                resource ProjectImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: ProjectImage)\n                        if child.project = parent;\n            \n\n                resource AffinityGroup {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: AffinityGroup)\n                        if child.project = parent;\n            \n\n                resource AntiAffinityGroup {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: AntiAffinityGroup)\n                        if child.project = parent;\n            \n\n                resource Instance {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Instance)\n                        if child.project = parent;\n            \n\n                resource IpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: IpPool)\n                    if child.fleet = fleet;\n            \n\n                resource InstanceNetworkInterface {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Instance\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InstanceNetworkInterface)\n                    if has_relation(project, \"containing_project\", child.instance);\n\n                has_relation(parent: Instance, \"parent\", child: InstanceNetworkInterface)\n                    if child.instance = parent;\n            \n\n                resource Vpc {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Vpc)\n                        if child.project = parent;\n            \n\n                resource VpcRouter {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcRouter)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcRouter)\n                    if child.vpc = parent;\n            \n\n                resource InternetGateway {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGateway)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: InternetGateway)\n                    if child.vpc = parent;\n            \n\n                resource InternetGatewayIpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: InternetGateway\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGatewayIpPool)\n                    if has_relation(project, \"containing_project\", child.internet_gateway);\n\n                has_relation(parent: InternetGateway, \"parent\", child: InternetGatewayIpPool)\n                    if child.internet_gateway = parent;\n            \n\n                resource InternetGatewayIpAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: InternetGateway\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGatewayIpAddress)\n                    if has_relation(project, \"containing_project\", child.internet_gateway);\n\n                has_relation(parent: InternetGateway, \"parent\", child: InternetGatewayIpAddress)\n                    if child.internet_gateway = parent;\n            \n\n                resource RouterRoute {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: VpcRouter\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: RouterRoute)\n                    if has_relation(project, \"containing_project\", child.vpc_router);\n\n                has_relation(parent: VpcRouter, \"parent\", child: RouterRoute)\n                    if child.vpc_router = parent;\n            \n\n                resource VpcSubnet {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcSubnet)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcSubnet)\n                    if child.vpc = parent;\n            \n\n                resource FloatingIp {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: FloatingIp)\n                        if child.project = parent;\n            \n\n                resource ExternalSubnet {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: ExternalSubnet)\n                        if child.project = parent;\n            \n\n                resource Image {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: Image)\n                    if child.silo = parent;\n            \n\n                resource SiloImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: SiloImage)\n                    if child.silo = parent;\n            \n\n                resource AddressLot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: AddressLot)\n                    if child.fleet = fleet;\n            \n\n                resource Blueprint {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Blueprint)\n                    if child.fleet = fleet;\n            \n\n                resource LoopbackAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: LoopbackAddress)\n                    if child.fleet = fleet;\n            \n\n\n                resource ConsoleSession {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: ConsoleSession)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAuthRequest {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAuthRequest)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAccessToken {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAccessToken)\n                    if child.fleet = fleet;\n            \n\n                resource PhysicalDisk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: PhysicalDisk)\n                    if child.fleet = fleet;\n            \n\n                resource Rack {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Rack)\n                    if child.fleet = fleet;\n            \n\n\n\n\n\n                resource SupportBundle {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: SupportBundle)\n                    if child.fleet = fleet;\n            \n\n\n\n                resource Sled {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Sled)\n                    if child.fleet = fleet;\n            \n\n                resource SubnetPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: SubnetPool)\n                    if child.fleet = fleet;\n            \n\n                resource TufRepo {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufRepo)\n                    if child.fleet = fleet;\n            \n\n                resource TufArtifact {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufArtifact)\n                    if child.fleet = fleet;\n            \n\n                resource TufTrustRoot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufTrustRoot)\n                    if child.fleet = fleet;\n            \n\n                resource Alert {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Alert)\n                    if child.fleet = fleet;\n            \n\n                resource AlertReceiver {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: AlertReceiver)\n                    if child.fleet = fleet;\n            \n\n\n                resource Zpool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Zpool)\n                    if child.fleet = fleet;\n            \n\n                resource Service {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Service)\n                    if child.fleet = fleet;\n            \n\n                resource UserBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: UserBuiltin)\n                    if child.fleet = fleet;\n            \n\n"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.108201052Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.108243643Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.109882754Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"attempting to create built-in users","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.109931084Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.110019205Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.110064215Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.110407148Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"created 6 built-in users","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.121731827Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.121759817Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.121776567Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.123492269Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"attempting to create built-in role assignments","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.123747271Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.123767251Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.123780351Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.123853561Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"created 5 built-in role assignments","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.214216861Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.214265331Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.214290191Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.215952983Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"attempting to create built-in silos","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.215998713Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.216006863Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.216017073Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.216298085Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"created 2 built-in silos","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.260685364Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.261273718Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.261310228Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.261325469Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.282151164Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.282209124Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.290086019Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"attempting to create built-in projects","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.291572939Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.291592099Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.291602999Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.291611419Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.294031926Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.294063917Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.294075237Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.294104817Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.29457198Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.29736003Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.297917353Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.297935074Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.297942794Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.332359453Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.334881101Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.334915991Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.334927701Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.334950311Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.334978762Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.335368624Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.337426948Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.337449379Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.337466239Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.337884512Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.339223961Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.341534437Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.341551597Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.341575998Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.3418922Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"created built-in services project","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.349020499Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.350870692Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.350900122Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.350908872Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"attempting to create built-in VPCs","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.350920732Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.350928282Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.350945743Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.351001973Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.352600194Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.353752352Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.353769532Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.354346826Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.354426707Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.354466757Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.354583938Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.355026281Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.356190809Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.356238729Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.356254879Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.356598832Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.358042332Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.358069712Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.358115003Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.358500845Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.359589083Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.36343639Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"successful lookup of siloed resource \"Project\" using built-in user","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.36346407Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.36347357Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.36349606Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.36350862Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.36355591Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.363990513Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.365179532Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.365212712Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.365228102Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.365573274Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.366848403Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.371632377Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.371655317Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.371672587Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.371695867Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.372305481Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.372352922Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.372365542Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.372676094Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.377243986Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.378443784Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.378475504Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.378495864Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.378504334Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.381967239Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.383436049Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.383498649Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.38350917Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.3835255Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.38363566Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.38364733Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.383903542Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.38498306Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.388763036Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.389063278Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.389143258Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.389182889Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.393553649Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.3935885Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.39359822Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.395353762Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.395412892Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.396102037Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.402860294Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.402900324Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.402929334Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.402942795Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.403453238Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.406177247Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.407195595Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.407211165Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.407219625Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.40797924Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.408869876Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.408896366Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.408905926Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.40946746Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.413170606Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.413224576Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.413243216Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.413574809Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.464624004Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.464687715Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.464710655Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.464723465Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.465241478Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.466843539Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.46687752Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.46690068Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.467394593Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.468757513Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.469286127Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.469301097Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.469310957Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.470371974Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.474667414Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.47555378Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.47557946Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.475588281Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.516597676Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.516650786Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.516684197Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.516698317Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.51717375Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.51868217Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.518736731Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.518752371Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.519196074Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.520243851Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.520270492Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.520283152Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.520706935Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.523231682Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.52727363Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.528039186Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.528064366Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.528073476Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"attempting to create built-in VPC firewall rules","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.531226918Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.531252818Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.531282168Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.531773961Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.533611954Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.533673835Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.534032367Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.535389107Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.535449397Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.53583509Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.539341914Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.539372715Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.539385325Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.539398155Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.539407895Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.539427965Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.539440475Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.539452195Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.539460325Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.570868244Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.570947164Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.570981444Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.571447588Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.575689478Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.579503194Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"successful lookup of siloed resource \"Vpc\" using built-in user","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.58039032Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.58041079Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Read","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.58043361Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.58044494Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.580455981Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.580464341Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.58177981Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.58181684Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.58182904Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.582182272Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.583392011Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.583421551Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.583436381Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.583816784Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.586907846Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.589239172Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Read","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.589788626Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.589802136Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.589810536Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.593191889Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.593626242Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.593641252Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.593652642Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.593661592Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.594876881Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.595743577Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.595767047Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.595776007Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.599505153Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.599535003Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.599549713Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.600061757Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.605697506Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.611184574Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.611219495Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.611231395Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.611239795Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"created built-in VPC firewall rules","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.686332168Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"attempting to create built-in VPC Subnets","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.68664862Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.68665916Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.68667257Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.686891691Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.688815755Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.688855145Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.68957053Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.691271272Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.691297892Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.691392973Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.693144445Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.693395637Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.694482445Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.69527526Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.695293Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.6953063Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.69532039Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.69533122Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.69533912Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.695908104Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.695922724Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.695953545Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.697909078Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.699671621Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.703328056Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"successful lookup of siloed resource \"Vpc\" using built-in user","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.704029211Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.704041291Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.704052591Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.704060681Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.70669638Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.70673305Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.70674817Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.70675962Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.707167703Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.709463149Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.710034453Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.710066133Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.710075673Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.710985019Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.712190808Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.712214258Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.712223228Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.712348539Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.715897954Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.719598019Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.720313284Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.720339635Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.720355805Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.720387925Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.725156018Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.726614148Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.726652848Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.726661488Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.731735364Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.731782264Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.731796264Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.732240987Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.733531886Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.737884216Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.738908084Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.738929524Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.738938604Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.74554554Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.746528717Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.746552957Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.758205258Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.760954177Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.760995637Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.761008038Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.761016738Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.761028508Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.761039808Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.761050738Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.761059168Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.761796723Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.764391781Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.764443612Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.764453902Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.764474352Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.767358202Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.796157142Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.796208703Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.796221923Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.796233813Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.796242123Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.804156028Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.804865793Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.804900203Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.804909353Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.810846805Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.810886695Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.810904895Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.811538159Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.81301487Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.817722423Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.819125292Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.819152633Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.819161523Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.866729114Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.866777414Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.867913672Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.868831788Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.868874749Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.868897999Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.868909599Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.869406002Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.871645408Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.872380733Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.872405753Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.872414833Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.873668482Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.874426447Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.874450527Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.874459378Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.879468602Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.883708012Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.890525019Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.894698089Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-4401-4000-8000-000000000000","resource_type":"Project","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.894729019Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.894739709Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.894747939Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.898919928Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-5110-4000-8000-000000000001","resource_type":"Silo","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.898986058Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.898997268Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.899544842Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.900863341Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.901263194Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.901274074Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.901359125Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.902401712Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.906952224Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName(\"oxide-services\") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) }","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.907012614Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.907023274Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.907380737Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.910471868Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.910498269Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.912056789Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"created built-in services vpc subnets","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.912452212Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"created built-in services vpc","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.912475392Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.912483162Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.912503332Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.914066933Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Modify","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"attempting to create silo users","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.914081763Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.914117634Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.914144704Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.914514826Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"created 2 silo users","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.95957621Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"attempting to create silo user role assignments","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.963718039Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.963743479Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.963756119Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.963764159Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"created 2 silo user role assignments","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:43.963775279Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.963781849Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.96379206Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.96380025Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.965442411Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.966110526Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.966123416Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.969045416Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.969084716Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.969095496Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.969115856Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.96958005Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.970710967Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.972276418Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:43.972898773Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.972927823Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:43.972936243Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.060244411Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.060281231Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.060308711Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.060319602Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.060864425Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.062275035Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.063850586Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"IpPoolList","action":"CreateChild","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.064607372Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.064617322Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.064624612Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. })"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06581732Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Action"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066543535Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AuditLog"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066567395Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AnyActor"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066575745Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AuthenticatedActor"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066583805Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"BlueprintConfig"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066591915Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Database"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066599145Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"DnsConfig"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066617265Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Fleet"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066630636Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Inventory"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066640566Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"IpPoolList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066650026Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"VpcList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066657536Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ConsoleSessionList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066667626Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"DeviceAuthRequestList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066677246Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"QuiesceState"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066687126Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloCertificateList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066707226Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloGroupList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066717156Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloIdentityProviderList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066725436Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloUserList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066735986Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloUserSessionList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066751206Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloUserTokenList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066761116Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SubnetPoolList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066771847Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"UpdateTrustRootList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066779617Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"TargetReleaseConfig"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066789397Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AlertClassList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066797337Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ScimClientBearerTokenList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066811657Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"MulticastGroupList"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066822077Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"TrustQuorumConfig"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066831297Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Project"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066848297Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Disk"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066859877Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Snapshot"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066868027Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ProjectImage"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066879267Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AffinityGroup"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066887087Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AntiAffinityGroup"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066894707Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Instance"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066903707Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"IpPool"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066913968Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"InstanceNetworkInterface"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066925888Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Vpc"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066933708Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"VpcRouter"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066941498Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"InternetGateway"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066949058Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"InternetGatewayIpPool"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066957068Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"InternetGatewayIpAddress"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066964648Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"RouterRoute"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066974188Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"VpcSubnet"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066981348Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"FloatingIp"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.066990978Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ExternalSubnet"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067000298Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Image"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067015338Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloImage"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067025258Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AddressLot"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067038968Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Blueprint"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067055588Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"LoopbackAddress"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067063159Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Certificate"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067077719Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ConsoleSession"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067087419Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"DeviceAuthRequest"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067095349Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"DeviceAccessToken"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067108179Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"PhysicalDisk"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067123229Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Rack"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067132849Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SshKey"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067147479Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Silo"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067156499Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloUser"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067166019Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SiloGroup"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067175609Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SupportBundle"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067183969Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"IdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.067193569Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SamlIdentityProvider"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06720343Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Sled"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06721763Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"SubnetPool"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06722892Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"TufRepo"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06723667Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"TufArtifact"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06725212Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"TufTrustRoot"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06726681Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Alert"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06727467Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"AlertReceiver"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06728472Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"WebhookSecret"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06729237Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Zpool"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06729982Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"Service"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06731081Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"UserBuiltin"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06731831Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"ScimClientBearerToken"}
{"msg":"registering Oso class","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06732596Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"class":"MulticastGroup"}
{"msg":"full Oso configuration","v":0,"name":"test_audit_log","level":30,"time":"2026-04-15T19:16:44.06733347Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"config":"#\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system.  All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n    actor.authenticated and\n    has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - \"create_child\": required to create child resources (of any type)\n#\n# - \"list_children\": required to list child resources (of all types) of a\n#   resource\n#\n# - \"modify\": required to modify or delete a resource\n#\n# - \"read\": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project.  The specific roles\n# are oriented around intended use-cases:\n#\n# - \"admin\": has all permissions on the resource\n#\n# - \"collaborator\": has \"read\", \"list_children\", and \"create_child\", plus\n#   the \"admin\" role for child resources.  The idea is that if you're an\n#   Organization Collaborator, you have full control over the Projects within\n#   the Organization, but you cannot modify or delete the Organization itself.\n#\n# - \"viewer\": has \"read\" and \"list_children\" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level.  For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin           (superuser for the whole system)\n# - fleet.collaborator    (can manage Silos)\n# - fleet.viewer          (can read most non-siloed resources in the system)\n# - silo.admin            (superuser for the silo)\n# - silo.collaborator     (can create and own Organizations; grants project.admin on all projects)\n# - silo.limited-collaborator (grants project.limited-collaborator on all projects)\n# - silo.viewer           (can read most resources within the Silo; grants project.viewer)\n# - organization.admin    (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer   (can read most resources within the Organization)\n# - project.admin         (complete control over a Project)\n# - project.collaborator  (can manage all resources within the Project, including networking)\n# - project.limited-collaborator (can manage compute resources, but not networking resources)\n# - project.viewer        (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below).  We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# \"Fleet\" is a global singleton representing the whole system.  The name comes\n# from the idea described in RFD 24, but it's not quite right.  This probably\n# should be more like \"Region\" or \"AvailabilityZone\".  The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\troles = [\n\t    # Roles that can be attached by users\n\t    \"admin\",\n\t    \"collaborator\",\n\t    \"viewer\",\n\n\t    # Internal-only roles\n\t    \"external-authenticator\"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\n# Note that certain Actors may not ever have any roles assigned to them, like\n# SCIM Actors.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"limited-collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t\"viewer\" if \"limited-collaborator\";\n\t\"limited-collaborator\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\n\t\"create_child\" if \"collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Permissions implied by roles on this resource's parent (Fleet).  Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo.  To achieve this, we use permission rules here.  (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"collaborator\" on \"parent_fleet\";\n\n\t# external authenticator has to create silo users\n\t\"list_children\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo.  That's\n# not quite the same as having the \"viewer\" role.  For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using \"POST /organizations\", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404.  This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif actor.is_user and silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\troles = [ \"admin\", \"collaborator\", \"limited-collaborator\", \"viewer\" ];\n\n\t# Roles implied by other roles on this resource\n\t# Role hierarchy: admin > collaborator > limited-collaborator > viewer\n\t#\n\t# The \"limited-collaborator\" role can create/modify non-networking\n\t# resources (instances, disks, etc.) but cannot create/modify networking\n\t# infrastructure (VPCs, subnets, routers, internet gateways).\n\t# See nexus/authz-macros for InProjectLimited vs InProjectFull.\n\t\"viewer\" if \"limited-collaborator\";\n\t\"limited-collaborator\" if \"collaborator\";\n\t\"collaborator\" if \"admin\";\n\n\t# Permissions granted directly by roles on this resource\n\t\"list_children\" if \"viewer\";\n\t\"read\" if \"viewer\";\n\t\"create_child\" if \"limited-collaborator\";\n\t\"modify\" if \"admin\";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t\"admin\" if \"collaborator\" on \"parent_silo\";\n\t\"limited-collaborator\" if \"limited-collaborator\" on \"parent_silo\";\n\t\"viewer\" if \"viewer\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro.  Some resources require custom Polar code.  Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users.  This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"read\" on \"parent_fleet\";\n\t\"read\" if \"read\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n    if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n    if actor.is_user and silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"read\",\n\t    \"create_child\",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\t\"read\" if \"read\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { silo_user: SiloUser };\n\n\t\"read\" if \"read\" on \"silo_user\";\n}\n# We want to allow the user to modify the ssh key but disallow a SCIM IdP token\n# from doing the same.\nhas_permission(actor: AuthenticatedActor, \"modify\", ssh_key: SshKey)\n\tif actor.is_user and has_permission(actor, \"modify\", ssh_key.silo_user);\nhas_relation(user: SiloUser, \"silo_user\", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t    \"read\",\n\t    \"modify\",\n\t    \"create_child\",\n\t    \"list_children\",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_silo\";\n\t\"list_children\" if \"viewer\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource ScimClientBearerToken {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n    # necessary to authenticate SCIM actors\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\n\t# Silo-level roles grant privileges for SCIM client tokens.\n\t\"read\" if \"admin\" on \"parent_silo\";\n\t\"modify\" if \"admin\" on \"parent_silo\";\n\n\t# Fleet-level roles also grant privileges for SCIM client tokens.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", scim_client_bearer_token: ScimClientBearerToken)\n\tif scim_client_bearer_token.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ScimClientBearerToken)\n\tif collection.silo.fleet = fleet;\n\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database.  These are used either at the top level\n# of the API path (e.g., \"/v1/system/ip-pools\") or as an implementation detail of the system\n# (in the case of console sessions and \"Database\").  The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet.  None of these resources defines their own roles.\n#\n\n# Describes the quiesce state of a particular Nexus instance.\n#\n# These authz checks must not require the database.  We grant this directly to\n# callers of the internal API.\nresource QuiesceState {\n\tpermissions = [ \"read\", \"modify\" ];\n}\nhas_permission(USER_INTERNAL_API: AuthenticatedActor, \"read\", _q: QuiesceState);\nhas_permission(\n    USER_INTERNAL_API: AuthenticatedActor,\n    \"modify\",\n    _q: QuiesceState\n);\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t# \"external-authenticator\" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos.  These\n\t# operations necessarily need to read and modify DNS configuration.\n\t\"read\" if \"external-authenticator\" on \"parent_fleet\";\n\t\"modify\" if \"external-authenticator\" on \"parent_fleet\";\n\t# \"admin\" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t\"read\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t    \"list_children\", # list blueprints\n\t    \"create_child\",  # create blueprint\n\t    \"read\",          # read the current target\n\t    \"modify\",        # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/update/trust-roots\" in the API\nresource UpdateTrustRootList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: UpdateTrustRootList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource TargetReleaseConfig {\n\tpermissions = [\n\t    \"read\",          # read the current target release\n\t    \"modify\",        # change the current target release\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", resource: TargetReleaseConfig)\n\tif resource.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing \"/v1/system/ip-pools\" in the API\nresource IpPoolList {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list IP Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, \"create_child\", ip_pool: IpPool)\n\tif actor.is_user and silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for accessing \"/v1/multicast-groups\" in the API\n# Groups are created when the first instance joins and deleted when the last leaves.\nresource MulticastGroupList {\n\tpermissions = [ \"list_children\" ];\n\n\trelations = { parent_fleet: Fleet };\n\n\t# Fleet Viewers can list multicast groups\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", multicast_group_list: MulticastGroupList)\n\tif multicast_group_list.fleet = fleet;\n\n# Any authenticated user can list multicast groups in their fleet.\n# This enables silo users to discover groups for attaching instances,\n# without requiring the Fleet::Viewer role.\nhas_permission(actor: AuthenticatedActor, \"list_children\", multicast_group_list: MulticastGroupList)\n\tif actor.is_user and silo in actor.silo and silo.fleet = multicast_group_list.fleet;\n\n# MulticastGroup is a fleet-level discovery resource.\n# Join/leave authorization is gated by Instance::Modify, not the group itself.\nresource MulticastGroup {\n\tpermissions = [ \"read\", \"list_children\" ];\n\trelations = { parent_fleet: Fleet };\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", multicast_group: MulticastGroup)\n\tif multicast_group.fleet = fleet;\n\n# Any authenticated user can read multicast groups in their fleet\nhas_permission(actor: AuthenticatedActor, \"read\", multicast_group: MulticastGroup)\n\tif actor.is_user and silo in actor.silo and silo.fleet = multicast_group.fleet;\n\n# Any authenticated user can list members of multicast groups in their fleet\nhas_permission(actor: AuthenticatedActor, \"list_children\", multicast_group: MulticastGroup)\n\tif actor.is_user and silo in actor.silo and silo.fleet = multicast_group.fleet;\n\n# Describes the policy for reading and writing the audit log\nresource AuditLog {\n\tpermissions = [\n\t    \"list_children\", # retrieve audit log\n\t    \"create_child\",  # create audit log entry\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\n\t# Fleet viewers can read the audit log\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\n\n# Any actor should be able to write to the audit log because we need to be able\n# to write to the log from any request, authenticated or not. Audit log writes\n# are always a byproduct of other operations: there are no endpoints that allow\n# the user to write to the log deliberately. Note we use AuthenticatedActor\n# because we don't really mean unauthenticated -- in the case of login\n# operations, we use the external authenticator actor that creates the session\n# to authorize the audit log write.\nhas_permission(_actor: AuthenticatedActor, \"create_child\", _audit_log: AuditLog);\n\nhas_relation(fleet: Fleet, \"parent_fleet\", audit_log: AuditLog)\n\tif audit_log.fleet = fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Allow silo admins to delete and list user sessions\nresource SiloUserSessionList {\n    permissions = [ \"modify\", \"list_children\" ];\n    relations = { parent_silo: Silo };\n\n    # A silo admin can modify (e.g., delete) a user's sessions.\n    \"modify\" if \"admin\" on \"parent_silo\";\n\n    # A silo admin can list a user's sessions.\n    \"list_children\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", authn_list: SiloUserSessionList)\n    if authn_list.silo_user.silo = silo;\n\n# give users 'modify' and 'list_children' on their own sessions\nhas_permission(actor: AuthenticatedActor, \"modify\", authn_list: SiloUserSessionList)\n    if actor.equals_silo_user(authn_list.silo_user);\nhas_permission(actor: AuthenticatedActor, \"list_children\", authn_list: SiloUserSessionList)\n    if actor.equals_silo_user(authn_list.silo_user);\n\n# Allow silo admins to delete and list user access tokens\nresource SiloUserTokenList {\n    permissions = [ \"modify\", \"list_children\" ];\n    relations = { parent_silo: Silo };\n\n    # A silo admin can modify (e.g., delete) a user's tokens.\n    \"modify\" if \"admin\" on \"parent_silo\";\n\n    # A silo admin can list a user's tokens.\n    \"list_children\" if \"admin\" on \"parent_silo\";\n}\nhas_relation(silo: Silo, \"parent_silo\", authn_list: SiloUserTokenList)\n    if authn_list.silo_user.silo = silo;\n\n# give users 'modify' and 'list_children' on their own tokens\nhas_permission(actor: AuthenticatedActor, \"modify\", authn_list: SiloUserTokenList)\n    if actor.equals_silo_user(authn_list.silo_user);\nhas_permission(actor: AuthenticatedActor, \"list_children\", authn_list: SiloUserTokenList)\n    if actor.equals_silo_user(authn_list.silo_user);\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ \"create_child\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"create_child\" if \"external-authenticator\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing trust quorum configurations\n# This may change in a multirack future to a per rack parent\nresource TrustQuorumConfig {\n    permissions = [ \"read\", \"modify\" ];\n\trelations = { parent_fleet: Fleet };\n\t\"read\" if \"viewer\" on \"parent_fleet\";\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", config: TrustQuorumConfig)\n\tif config.rack.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration.  This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on.  This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission.  For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's users.  This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on.  This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission.  For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# Grant SCIM IdP actors the permissions they need on users.\nhas_permission(actor: AuthenticatedActor, \"read\", silo_user: SiloUser)\n    if actor.is_scim_idp and silo_user.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"create_child\", silo_user_list: SiloUserList)\n\tif actor.is_scim_idp and silo_user_list.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"modify\", silo_user: SiloUser)\n\tif actor.is_scim_idp and silo_user.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"list_children\", silo_user_list: SiloUserList)\n    if actor.is_scim_idp and silo_user_list.silo in actor.silo;\n\n# Describes the policy for creating and managing Silo groups (mostly intended\n# for API-managed groups)\nresource SiloGroupList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the groups in the\n\t# Silo) can see the groups in it.\n\t\"list_children\" if \"read\" on \"parent_silo\";\n\n\t# Fleet and Silo administrators can manage the Silo's groups.  This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on.  This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission.  For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", collection: SiloGroupList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: SiloGroupList)\n\tif collection.silo.fleet = fleet;\n\n# Grant SCIM IdP actors the permissions they need on groups.\nhas_permission(actor: AuthenticatedActor, \"read\", silo_group: SiloGroup)\n    if actor.is_scim_idp and silo_group.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"create_child\", silo_group_list: SiloGroupList)\n\tif actor.is_scim_idp and silo_group_list.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"modify\", silo_group: SiloGroup)\n\tif actor.is_scim_idp and silo_group.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, \"list_children\", silo_group_list: SiloGroupList)\n    if actor.is_scim_idp and silo_group_list.silo in actor.silo;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions.  This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, \"read\", silo: Silo)\n\tif has_role(actor, \"external-authenticator\", silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", user: SiloUser)\n\tif has_role(actor, \"external-authenticator\", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"read\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", group: SiloGroup)\n\tif has_role(actor, \"external-authenticator\", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\nhas_permission(actor: AuthenticatedActor, \"modify\", session: ConsoleSession)\n\tif has_role(actor, \"external-authenticator\", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with.  Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(actor: AuthenticatedActor, \"read\", _device_auth: DeviceAuthRequest)\n    if actor.is_user;\nhas_permission(actor: AuthenticatedActor, \"modify\", _device_auth: DeviceAuthRequest)\n    if actor.is_user;\n\nhas_permission(actor: AuthenticatedActor, \"read\", device_token: DeviceAccessToken)\n\tif has_role(actor, \"external-authenticator\", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", identity_provider: IdentityProvider)\n\tif has_role(actor, \"external-authenticator\", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, \"read\", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, \"external-authenticator\", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t    # \"query\" is required to perform any query against the database,\n\t    # whether a read or write query.  This is checked when an operation\n\t    # checks out a database connection from the connection pool.\n\t    #\n\t    # Any authenticated user gets this permission.  There's generally\n\t    # some other authz check involved in the database query.  For\n\t    # example, if you're querying the database to \"read\" a \"Project\", we\n\t    # should also be checking that.  So why do we do this at all?  It's\n\t    # a belt-and-suspenders measure so that if we somehow introduced an\n\t    # unauthenticated code path that hits the database, it cannot be\n\t    # used to DoS the database because we won't allow the operation to\n\t    # make the query.  (As long as the code path _is_ authenticated, we\n\t    # can use throttling mechanisms to prevent DoS.)\n\t    \"query\",\n\n\t    # \"modify\" is required to populate database data that's delivered\n\t    # with the system.  It should also be required for schema changes,\n\t    # when we support those.  This is separate from \"query\" so that we\n\t    # cannot accidentally invoke these code paths from API calls and\n\t    # other general functions.\n\t    \"modify\"\n\t];\n}\n\n# All authenticated users have the \"query\" permission on the database.\nhas_permission(_actor: AuthenticatedActor, \"query\", _resource: Database);\n\n# The \"db-init\" user is the only one with the \"modify\" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"modify\", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, \"create_child\", _resource: IpPoolList);\n# It also has \"admin\" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, \"admin\", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, \"admin\", _silo: Silo);\n\nresource WebhookSecret {\n\tpermissions = [ \"read\", \"modify\" ];\n\trelations = { parent_alert_receiver: AlertReceiver };\n\n\t\"read\" if \"read\" on \"parent_alert_receiver\";\n\t\"modify\" if \"modify\" on \"parent_alert_receiver\";\n}\n\nhas_relation(rx: AlertReceiver, \"parent_alert_receiver\", secret: WebhookSecret)\n\tif secret.alert_receiver = rx;\n\nresource AlertClassList {\n\tpermissions = [ \"list_children\" ];\n\trelations = { parent_fleet: Fleet };\n\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\n\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: AlertClassList)\n\tif collection.fleet = fleet;\n\nresource ScimClientBearerTokenList {\n\tpermissions = [ \"create_child\", \"list_children\" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges for SCIM client tokens.\n    # These are all admin because being able to create these tokens would allow\n    # a user to grant themselves admin by modifying group membership through SCIM calls\n\t\"create_child\" if \"admin\" on \"parent_silo\";\n\t\"list_children\" if \"admin\" on \"parent_silo\";\n\n    # Fleet-level roles also grant privileges for SCIM client tokens, for\n    # configuration before silo admins are present.\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\t\"list_children\" if \"admin\" on \"parent_fleet\";\n}\nhas_relation(silo: Silo, \"parent_silo\", scim_client_bearer_token_list: ScimClientBearerTokenList)\n\tif scim_client_bearer_token_list.silo = silo;\nhas_relation(fleet: Fleet, \"parent_fleet\", collection: ScimClientBearerTokenList)\n\tif collection.silo.fleet = fleet;\n\n# VpcList is a synthetic resource for controlling VPC creation.\n# Unlike other project resources, VPC creation requires the full \"collaborator\"\n# role rather than \"limited-collaborator\", enforcing the networking restriction.\n# This allows organizations to restrict who can reconfigure the network topology\n# while still allowing users with limited-collaborator to work with compute\n# resources (instances, disks, etc.) within the existing network.\nresource VpcList {\n\tpermissions = [ \"list_children\", \"create_child\" ];\n\n\trelations = { containing_project: Project };\n\n\t\"list_children\" if \"read\" on \"containing_project\";\n\t\"create_child\" if \"collaborator\" on \"containing_project\";\n}\nhas_relation(project: Project, \"containing_project\", collection: VpcList)\n\tif collection.project = project;\n\n# Describes the policy for accessing \"/v1/system/subnet-pools\" in the API\nresource SubnetPoolList {\n\tpermissions = [\n\t    \"list_children\",\n\t    \"modify\",\n\t    \"create_child\",\n\t];\n\n\t# Fleet Administrators can create or modify the Subnet Pools list.\n\trelations = { parent_fleet: Fleet };\n\t\"modify\" if \"admin\" on \"parent_fleet\";\n\t\"create_child\" if \"admin\" on \"parent_fleet\";\n\n\t# Fleet Viewers can list External Subnet Pools\n\t\"list_children\" if \"viewer\" on \"parent_fleet\";\n}\nhas_relation(fleet: Fleet, \"parent_fleet\", subnet_pool_list: SubnetPoolList)\n\tif subnet_pool_list.fleet = fleet;\n\n\n\n                resource Disk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Disk)\n                        if child.project = parent;\n            \n\n                resource Snapshot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Snapshot)\n                        if child.project = parent;\n            \n\n                resource ProjectImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: ProjectImage)\n                        if child.project = parent;\n            \n\n                resource AffinityGroup {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: AffinityGroup)\n                        if child.project = parent;\n            \n\n                resource AntiAffinityGroup {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: AntiAffinityGroup)\n                        if child.project = parent;\n            \n\n                resource Instance {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Instance)\n                        if child.project = parent;\n            \n\n                resource IpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: IpPool)\n                    if child.fleet = fleet;\n            \n\n                resource InstanceNetworkInterface {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Instance\n                    };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InstanceNetworkInterface)\n                    if has_relation(project, \"containing_project\", child.instance);\n\n                has_relation(parent: Instance, \"parent\", child: InstanceNetworkInterface)\n                    if child.instance = parent;\n            \n\n                resource Vpc {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: Vpc)\n                        if child.project = parent;\n            \n\n                resource VpcRouter {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcRouter)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcRouter)\n                    if child.vpc = parent;\n            \n\n                resource InternetGateway {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGateway)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: InternetGateway)\n                    if child.vpc = parent;\n            \n\n                resource InternetGatewayIpPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: InternetGateway\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGatewayIpPool)\n                    if has_relation(project, \"containing_project\", child.internet_gateway);\n\n                has_relation(parent: InternetGateway, \"parent\", child: InternetGatewayIpPool)\n                    if child.internet_gateway = parent;\n            \n\n                resource InternetGatewayIpAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: InternetGateway\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: InternetGatewayIpAddress)\n                    if has_relation(project, \"containing_project\", child.internet_gateway);\n\n                has_relation(parent: InternetGateway, \"parent\", child: InternetGatewayIpAddress)\n                    if child.internet_gateway = parent;\n            \n\n                resource RouterRoute {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: VpcRouter\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: RouterRoute)\n                    if has_relation(project, \"containing_project\", child.vpc_router);\n\n                has_relation(parent: VpcRouter, \"parent\", child: RouterRoute)\n                    if child.vpc_router = parent;\n            \n\n                resource VpcSubnet {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = {\n                        containing_project: Project,\n                        parent: Vpc\n                    };\n\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"collaborator\" on \"containing_project\";\n                    \"create_child\" if \"collaborator\" on \"containing_project\";\n                }\n\n                has_relation(project: Project, \"containing_project\", child: VpcSubnet)\n                    if has_relation(project, \"containing_project\", child.vpc);\n\n                has_relation(parent: Vpc, \"parent\", child: VpcSubnet)\n                    if child.vpc = parent;\n            \n\n                resource FloatingIp {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: FloatingIp)\n                        if child.project = parent;\n            \n\n                resource ExternalSubnet {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_project: Project };\n                    \"list_children\" if \"viewer\" on \"containing_project\";\n                    \"read\" if \"viewer\" on \"containing_project\";\n                    \"modify\" if \"limited-collaborator\" on \"containing_project\";\n                    \"create_child\" if \"limited-collaborator\" on \"containing_project\";\n                }\n\n                has_relation(parent: Project, \"containing_project\", child: ExternalSubnet)\n                        if child.project = parent;\n            \n\n                resource Image {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: Image)\n                    if child.silo = parent;\n            \n\n                resource SiloImage {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n\n                    relations = { containing_silo: Silo };\n                    \"list_children\" if \"viewer\" on \"containing_silo\";\n                    \"read\" if \"viewer\" on \"containing_silo\";\n                    \"modify\" if \"collaborator\" on \"containing_silo\";\n                    \"create_child\" if \"collaborator\" on \"containing_silo\";\n                }\n\n                has_relation(parent: Silo, \"containing_silo\", child: SiloImage)\n                    if child.silo = parent;\n            \n\n                resource AddressLot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: AddressLot)\n                    if child.fleet = fleet;\n            \n\n                resource Blueprint {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Blueprint)\n                    if child.fleet = fleet;\n            \n\n                resource LoopbackAddress {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: LoopbackAddress)\n                    if child.fleet = fleet;\n            \n\n\n                resource ConsoleSession {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: ConsoleSession)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAuthRequest {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAuthRequest)\n                    if child.fleet = fleet;\n            \n\n                resource DeviceAccessToken {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: DeviceAccessToken)\n                    if child.fleet = fleet;\n            \n\n                resource PhysicalDisk {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: PhysicalDisk)\n                    if child.fleet = fleet;\n            \n\n                resource Rack {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Rack)\n                    if child.fleet = fleet;\n            \n\n\n\n\n\n                resource SupportBundle {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: SupportBundle)\n                    if child.fleet = fleet;\n            \n\n\n\n                resource Sled {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Sled)\n                    if child.fleet = fleet;\n            \n\n                resource SubnetPool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: SubnetPool)\n                    if child.fleet = fleet;\n            \n\n                resource TufRepo {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufRepo)\n                    if child.fleet = fleet;\n            \n\n                resource TufArtifact {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufArtifact)\n                    if child.fleet = fleet;\n            \n\n                resource TufTrustRoot {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: TufTrustRoot)\n                    if child.fleet = fleet;\n            \n\n                resource Alert {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Alert)\n                    if child.fleet = fleet;\n            \n\n                resource AlertReceiver {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: AlertReceiver)\n                    if child.fleet = fleet;\n            \n\n\n                resource Zpool {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Zpool)\n                    if child.fleet = fleet;\n            \n\n                resource Service {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: Service)\n                    if child.fleet = fleet;\n            \n\n                resource UserBuiltin {\n                    permissions = [\n                        \"list_children\",\n                        \"modify\",\n                        \"read\",\n                        \"create_child\",\n                    ];\n                    \n                    relations = { parent_fleet: Fleet };\n                    \"list_children\" if \"viewer\" on \"parent_fleet\";\n                    \"read\" if \"viewer\" on \"parent_fleet\";\n                    \"modify\" if \"admin\" on \"parent_fleet\";\n                    \"create_child\" if \"admin\" on \"parent_fleet\";\n                }\n                has_relation(fleet: Fleet, \"parent_fleet\", child: UserBuiltin)\n                    if child.fleet = fleet;\n            \n\n"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.083601854Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"AuditLog","action":"ListChildren","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.083633444Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.083662404Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.083685334Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.084683501Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.091041806Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.095276975Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"AuditLog","action":"ListChildren","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.096145241Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.096156981Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.096164721Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.102226053Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"AuditLog","action":"ListChildren","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.103835215Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.103857385Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.103868135Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.103875605Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.10455548Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.108625938Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"AuditLog","action":"ListChildren","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.108659328Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.108678608Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.109096111Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.110784833Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"AuditLog","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.110801143Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.110812183Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.110828443Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.110848263Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.113636933Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.115161364Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"AuditLog","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.115188964Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.115210664Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.115528926Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.148698967Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"AuditLog","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.149468602Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.149493792Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.149505382Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.149513372Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.151405186Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.152979727Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"AuditLog","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.154014114Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.154030004Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.154037764Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.15493595Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"AuditLog","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.156034098Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.156055348Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.156065918Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.156073848Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.156921804Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.158333684Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"AuditLog","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.158836807Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.158848127Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.158856008Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.19794638Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"AuditLog","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.19799138Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.1980029Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.19803074Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.198583164Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.200692299Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.20230598Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"AuditLog","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.202347401Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.202381411Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.203130576Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.204125103Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"AuditLog","action":"ListChildren","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.204826808Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.204852358Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.204868688Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.204877018Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.206255518Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.212726062Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"AuditLog","action":"ListChildren","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.213651669Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.213670099Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.213680289Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.213693689Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"AuditLog","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.213706579Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.213718819Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.213730029Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.213738149Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.215059329Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.216526429Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"AuditLog","action":"CreateChild","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.216562709Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.216576409Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.216899492Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.218486353Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"AuditLog","action":"ListChildren","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.218779055Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.218806355Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.218825795Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.219296899Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.220562227Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.224444724Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"AuditLog","action":"ListChildren","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.224475844Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.224494604Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.225794103Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.226593449Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"AuditLog","action":"ListChildren","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"loading roles","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.226643709Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource_id":"001de000-1334-4000-8000-000000000000","resource_type":"Fleet","actor":"Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. }"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.226663579Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.22669124Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.226852741Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.228497532Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, \"admin\")} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.232354309Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"AuditLog","action":"ListChildren","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"authorize begin","v":0,"name":"test_audit_log","level":10,"time":"2026-04-15T19:16:44.233117175Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"roles","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.233132045Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"roles":"RoleSet { roles: {} }"}
{"msg":"authorize result","v":0,"name":"test_audit_log","level":20,"time":"2026-04-15T19:16:44.233140535Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775,"result":"Ok(())","resource":"Database","action":"Query","actor":"Some(Actor::SiloUser { silo_user_id: 001de000-05e4-4000-8000-000000004007 (silo_user), silo_id: 001de000-5110-4000-8000-000000000000, .. })"}
{"msg":"Pool dropped without invoking `terminate`. qorb background tasks\n                 should be cancelled, but they may briefly still be initializing connections","v":0,"name":"test_audit_log","level":50,"time":"2026-04-15T19:16:46.757053168Z","hostname":"w-01KP98GZE1Z52DMFW0VS7MAV8G","pid":66775}