Max level shown:
1 [ Jul 2 21:44:49 Enabled. ]
2 [ Jul 2 21:44:49 Rereading configuration. ]
3 [ Jul 2 21:44:50 Rereading configuration. ]
4 [ Jul 2 21:44:57 Executing start method ("ctrun -l child -o noorphan,regent /opt/oxide/omicron-nexus/bin/nexus /var/svc/manifest/site/nexus/config.toml &"). ]
5 [ Jul 2 21:44:57 Method "start" exited with status 0. ]
6 note: configured to log to "/dev/stdout"
72026-07-02T21:44:57.498ZDEBGnexus: registered DTrace probes
82026-07-02T21:44:57.500ZINFOnexus: setting up nexus server file = nexus/src/lib.rs:89
92026-07-02T21:44:57.508ZINFOnexus (ServerContext): registering Oso class class = Action file = nexus/auth/src/authz/oso_generic.rs:68
102026-07-02T21:44:57.508ZINFOnexus (ServerContext): registering Oso class class = AuditLog file = nexus/auth/src/authz/oso_generic.rs:68
112026-07-02T21:44:57.508ZINFOnexus (ServerContext): registering Oso class class = AnyActor file = nexus/auth/src/authz/oso_generic.rs:68
122026-07-02T21:44:57.508ZINFOnexus (ServerContext): registering Oso class class = AuthenticatedActor file = nexus/auth/src/authz/oso_generic.rs:68
132026-07-02T21:44:57.508ZINFOnexus (ServerContext): registering Oso class class = BlueprintConfig file = nexus/auth/src/authz/oso_generic.rs:68
142026-07-02T21:44:57.508ZINFOnexus (ServerContext): registering Oso class class = Database file = nexus/auth/src/authz/oso_generic.rs:68
152026-07-02T21:44:57.508ZINFOnexus (ServerContext): registering Oso class class = DnsConfig file = nexus/auth/src/authz/oso_generic.rs:68
162026-07-02T21:44:57.508ZINFOnexus (ServerContext): registering Oso class class = Fleet file = nexus/auth/src/authz/oso_generic.rs:68
172026-07-02T21:44:57.508ZINFOnexus (ServerContext): registering Oso class class = Inventory file = nexus/auth/src/authz/oso_generic.rs:68
182026-07-02T21:44:57.508ZINFOnexus (ServerContext): registering Oso class class = IpPoolList file = nexus/auth/src/authz/oso_generic.rs:68
192026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = VpcList file = nexus/auth/src/authz/oso_generic.rs:68
202026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = ConsoleSessionList file = nexus/auth/src/authz/oso_generic.rs:68
212026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = DeviceAuthRequestList file = nexus/auth/src/authz/oso_generic.rs:68
222026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = QuiesceState file = nexus/auth/src/authz/oso_generic.rs:68
232026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = SiloCertificateList file = nexus/auth/src/authz/oso_generic.rs:68
242026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = SiloGroupList file = nexus/auth/src/authz/oso_generic.rs:68
252026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = SiloIdentityProviderList file = nexus/auth/src/authz/oso_generic.rs:68
262026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = SiloUserList file = nexus/auth/src/authz/oso_generic.rs:68
272026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = SiloUserSessionList file = nexus/auth/src/authz/oso_generic.rs:68
282026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = SiloUserTokenList file = nexus/auth/src/authz/oso_generic.rs:68
292026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = SubnetPoolList file = nexus/auth/src/authz/oso_generic.rs:68
302026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = UpdateTrustRootList file = nexus/auth/src/authz/oso_generic.rs:68
312026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = TargetReleaseConfig file = nexus/auth/src/authz/oso_generic.rs:68
322026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = AlertClassList file = nexus/auth/src/authz/oso_generic.rs:68
332026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = ScimClientBearerTokenList file = nexus/auth/src/authz/oso_generic.rs:68
342026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = MulticastGroupList file = nexus/auth/src/authz/oso_generic.rs:68
352026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = TrustQuorumConfig file = nexus/auth/src/authz/oso_generic.rs:68
362026-07-02T21:44:57.509ZINFOnexus (ServerContext): registering Oso class class = Project file = nexus/auth/src/authz/oso_generic.rs:68
372026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = Disk file = nexus/auth/src/authz/oso_generic.rs:68
382026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = Snapshot file = nexus/auth/src/authz/oso_generic.rs:68
392026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = ProjectImage file = nexus/auth/src/authz/oso_generic.rs:68
402026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = AffinityGroup file = nexus/auth/src/authz/oso_generic.rs:68
412026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = AntiAffinityGroup file = nexus/auth/src/authz/oso_generic.rs:68
422026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = Instance file = nexus/auth/src/authz/oso_generic.rs:68
432026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = IpPool file = nexus/auth/src/authz/oso_generic.rs:68
442026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = InstanceNetworkInterface file = nexus/auth/src/authz/oso_generic.rs:68
452026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = Vpc file = nexus/auth/src/authz/oso_generic.rs:68
462026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = VpcRouter file = nexus/auth/src/authz/oso_generic.rs:68
472026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = InternetGateway file = nexus/auth/src/authz/oso_generic.rs:68
482026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = InternetGatewayIpPool file = nexus/auth/src/authz/oso_generic.rs:68
492026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = InternetGatewayIpAddress file = nexus/auth/src/authz/oso_generic.rs:68
502026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = RouterRoute file = nexus/auth/src/authz/oso_generic.rs:68
512026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = VpcSubnet file = nexus/auth/src/authz/oso_generic.rs:68
522026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = FloatingIp file = nexus/auth/src/authz/oso_generic.rs:68
532026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = ExternalSubnet file = nexus/auth/src/authz/oso_generic.rs:68
542026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = Image file = nexus/auth/src/authz/oso_generic.rs:68
552026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = SiloImage file = nexus/auth/src/authz/oso_generic.rs:68
562026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = AddressLot file = nexus/auth/src/authz/oso_generic.rs:68
572026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = Blueprint file = nexus/auth/src/authz/oso_generic.rs:68
582026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = LoopbackAddress file = nexus/auth/src/authz/oso_generic.rs:68
592026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = Certificate file = nexus/auth/src/authz/oso_generic.rs:68
602026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = ConsoleSession file = nexus/auth/src/authz/oso_generic.rs:68
612026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = DeviceAuthRequest file = nexus/auth/src/authz/oso_generic.rs:68
622026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = DeviceAccessToken file = nexus/auth/src/authz/oso_generic.rs:68
632026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = PhysicalDisk file = nexus/auth/src/authz/oso_generic.rs:68
642026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = Rack file = nexus/auth/src/authz/oso_generic.rs:68
652026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = SshKey file = nexus/auth/src/authz/oso_generic.rs:68
662026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = Silo file = nexus/auth/src/authz/oso_generic.rs:68
672026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = SiloUser file = nexus/auth/src/authz/oso_generic.rs:68
682026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = SiloGroup file = nexus/auth/src/authz/oso_generic.rs:68
692026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = SupportBundle file = nexus/auth/src/authz/oso_generic.rs:68
702026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = IdentityProvider file = nexus/auth/src/authz/oso_generic.rs:68
712026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = SamlIdentityProvider file = nexus/auth/src/authz/oso_generic.rs:68
722026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = Sled file = nexus/auth/src/authz/oso_generic.rs:68
732026-07-02T21:44:57.510ZINFOnexus (ServerContext): registering Oso class class = SubnetPool file = nexus/auth/src/authz/oso_generic.rs:68
742026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = TufRepo file = nexus/auth/src/authz/oso_generic.rs:68
752026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = TufArtifact file = nexus/auth/src/authz/oso_generic.rs:68
762026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = TufTrustRoot file = nexus/auth/src/authz/oso_generic.rs:68
772026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = Alert file = nexus/auth/src/authz/oso_generic.rs:68
782026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = AlertReceiver file = nexus/auth/src/authz/oso_generic.rs:68
792026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = WebhookSecret file = nexus/auth/src/authz/oso_generic.rs:68
802026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = Zpool file = nexus/auth/src/authz/oso_generic.rs:68
812026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = Service file = nexus/auth/src/authz/oso_generic.rs:68
822026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = UserBuiltin file = nexus/auth/src/authz/oso_generic.rs:68
832026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = ScimClientBearerToken file = nexus/auth/src/authz/oso_generic.rs:68
842026-07-02T21:44:57.511ZINFOnexus (ServerContext): registering Oso class class = MulticastGroup file = nexus/auth/src/authz/oso_generic.rs:68
852026-07-02T21:44:57.511ZINFOnexus (ServerContext): full Oso configuration config = #\n# Oso configuration for Omicron\n# This file is augmented by generated snippets.\n#\n\n#\n# ACTOR TYPES AND BASIC RULES\n#\n\n# `AnyActor` includes both authenticated and unauthenticated users.\nactor AnyActor {}\n\n# An `AuthenticatedActor` has an identity in the system. All of our operations\n# today require that an actor be authenticated.\nactor AuthenticatedActor {}\n\n# For any resource, `actor` can perform action `action` on it if they're\n# authenticated and their role(s) give them the corresponding permission on that\n# resource.\nallow(actor: AnyActor, action: Action, resource) if\n actor.authenticated and\n has_permission(actor.authn_actor.unwrap(), action.to_perm(), resource);\n\n# Define role relationships\nhas_role(actor: AuthenticatedActor, role: String, resource: Resource)\n\tif resource.has_role(actor, role);\n\n#\n# ROLES AND PERMISSIONS IN THE FLEET/SILO/PROJECT HIERARCHY\n#\n# We define the following permissions for most resources in the system:\n#\n# - "create_child": required to create child resources (of any type)\n#\n# - "list_children": required to list child resources (of all types) of a\n# resource\n#\n# - "modify": required to modify or delete a resource\n#\n# - "read": required to read a resource\n#\n# We define the following predefined roles for only a few high-level resources:\n# the Fleet (see below), Silo, Organization, and Project. The specific roles\n# are oriented around intended use-cases:\n#\n# - "admin": has all permissions on the resource\n#\n# - "collaborator": has "read", "list_children", and "create_child", plus\n# the "admin" role for child resources. The idea is that if you're an\n# Organization Collaborator, you have full control over the Projects within\n# the Organization, but you cannot modify or delete the Organization itself.\n#\n# - "viewer": has "read" and "list_children" on a resource\n#\n# Below the Project level, permissions are granted via roles at the Project\n# level. For example, for someone to be able to create, modify, or delete any\n# Instances, they must be granted project.collaborator, which means they can\n# create, modify, or delete _all_ resources in the Project.\n#\n# The complete set of predefined roles:\n#\n# - fleet.admin (superuser for the whole system)\n# - fleet.collaborator (can manage Silos)\n# - fleet.viewer (can read most non-siloed resources in the system)\n# - silo.admin (superuser for the silo)\n# - silo.collaborator (can create and own Organizations; grants project.admin on all projects)\n# - silo.limited-collaborator (grants project.limited-collaborator on all projects)\n# - silo.viewer (can read most resources within the Silo; grants project.viewer)\n# - organization.admin (complete control over an organization)\n# - organization.collaborator (can manage Projects)\n# - organization.viewer (can read most resources within the Organization)\n# - project.admin (complete control over a Project)\n# - project.collaborator (can manage all resources within the Project, including networking)\n# - project.limited-collaborator (can manage compute resources, but not networking resources)\n# - project.viewer (can read most resources within the Project)\n#\n# Outside the Silo/Organization/Project hierarchy, we (currently) treat most\n# resources as nested under Fleet or else a synthetic resource (see below). We\n# do not yet support role assignments on anything other than Fleet, Silo,\n# Organization, or Project.\n#\n\n# "Fleet" is a global singleton representing the whole system. The name comes\n# from the idea described in RFD 24, but it's not quite right. This probably\n# should be more like "Region" or "AvailabilityZone". The precise boundaries\n# have not yet been figured out.\nresource Fleet {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "read",\n\t "create_child",\n\t];\n\n\troles = [\n\t # Roles that can be attached by users\n\t "admin",\n\t "collaborator",\n\t "viewer",\n\n\t # Internal-only roles\n\t "external-authenticator"\n\t];\n\n\t# Roles implied by other roles on this resource\n\t"viewer" if "collaborator";\n\t"collaborator" if "admin";\n\n\t# Permissions granted directly by roles on this resource\n\t"list_children" if "viewer";\n\t"read" if "viewer";\n\t"create_child" if "collaborator";\n\t"modify" if "admin";\n}\n\n# For fleets specifically, roles can be conferred by roles on the user's Silo.\n# Note that certain Actors may not ever have any roles assigned to them, like\n# SCIM Actors.\nhas_role(actor: AuthenticatedActor, role: String, _: Fleet) if\n\tsilo_role in actor.confers_fleet_role(role) and\n\thas_role(actor, silo_role, actor.silo.unwrap());\n\nresource Silo {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "read",\n\t "create_child",\n\t];\n\troles = [ "admin", "collaborator", "limited-collaborator", "viewer" ];\n\n\t# Roles implied by other roles on this resource\n\t"viewer" if "limited-collaborator";\n\t"limited-collaborator" if "collaborator";\n\t"collaborator" if "admin";\n\n\t# Permissions granted directly by roles on this resource\n\t"list_children" if "viewer";\n\t"read" if "viewer";\n\n\t"create_child" if "collaborator";\n\t"modify" if "admin";\n\n\t# Permissions implied by roles on this resource's parent (Fleet). Fleet\n\t# privileges allow a user to see and potentially administer the Silo,\n\t# but they do not give anyone permission to look at anything inside the\n\t# Silo. To achieve this, we use permission rules here. (If we granted\n\t# Fleet administrators _roles_ on the Silo, then those would cascade\n\t# into the Silo as well.)\n\trelations = { parent_fleet: Fleet };\n\t"read" if "viewer" on "parent_fleet";\n\t"modify" if "collaborator" on "parent_fleet";\n\n\t# external authenticator has to create silo users\n\t"list_children" if "external-authenticator" on "parent_fleet";\n\t"create_child" if "external-authenticator" on "parent_fleet";\n}\n\nhas_relation(fleet: Fleet, "parent_fleet", silo: Silo)\n\tif silo.fleet = fleet;\n\n# As a special case, all authenticated users can read their own Silo. That's\n# not quite the same as having the "viewer" role. For example, they cannot list\n# Organizations in the Silo.\n#\n# One reason this is necessary is because if an unprivileged user tries to\n# create an Organization using "POST /organizations", they should get back a 403\n# (which implies they're able to see /organizations, which is essentially seeing\n# the Silo itself) rather than a 404. This behavior isn't a hard constraint\n# (i.e., you could reasonably get a 404 for an API you're not allowed to call).\n# Nor is the implementation (i.e., we could special-case this endpoint somehow).\n# But granting this permission is the simplest way to keep this endpoint's\n# behavior consistent with the rest of the API.\n#\n# This rule is also used to determine if a user can list the identity providers\n# in the Silo (which they should be able to), since that's predicated on being\n# able to read the Silo.\n#\n# It's unclear what else would break if users couldn't see their own Silo.\nhas_permission(actor: AuthenticatedActor, "read", silo: Silo)\n\tif actor.is_user and silo in actor.silo;\n\nresource Project {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "read",\n\t "create_child",\n\t];\n\troles = [ "admin", "collaborator", "limited-collaborator", "viewer" ];\n\n\t# Roles implied by other roles on this resource\n\t# Role hierarchy: admin > collaborator > limited-collaborator > viewer\n\t#\n\t# The "limited-collaborator" role can create/modify non-networking\n\t# resources (instances, disks, etc.) but cannot create/modify networking\n\t# infrastructure (VPCs, subnets, routers, internet gateways).\n\t# See nexus/authz-macros for InProjectLimited vs InProjectFull.\n\t"viewer" if "limited-collaborator";\n\t"limited-collaborator" if "collaborator";\n\t"collaborator" if "admin";\n\n\t# Permissions granted directly by roles on this resource\n\t"list_children" if "viewer";\n\t"read" if "viewer";\n\t"create_child" if "limited-collaborator";\n\t"modify" if "admin";\n\n\t# Roles implied by roles on this resource's parent (Silo)\n\trelations = { parent_silo: Silo };\n\t"admin" if "collaborator" on "parent_silo";\n\t"limited-collaborator" if "limited-collaborator" on "parent_silo";\n\t"viewer" if "viewer" on "parent_silo";\n}\nhas_relation(silo: Silo, "parent_silo", project: Project)\n\tif project.silo = silo;\n\n#\n# GENERAL RESOURCES OUTSIDE THE SILO/PROJECT HIERARCHY\n#\n# Many resources use snippets of Polar generated by the `authz_resource!` Rust\n# macro. Some resources require custom Polar code. Those appear here.\n#\n\nresource Certificate {\n\tpermissions = [ "read", "modify" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Fleet-level and silo-level roles both grant privileges on certificates.\n\t"read" if "admin" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\t"read" if "admin" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", certificate: Certificate)\n\tif certificate.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", certificate: Certificate)\n\tif certificate.silo.fleet = fleet;\n\nresource SiloUser {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "read",\n\t "create_child",\n\t];\n\n\t# Fleet and Silo administrators can manage a Silo's users. This is one\n\t# of the only areas of Silo configuration that Fleet Administrators have\n\t# permissions on.\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\t"list_children" if "read" on "parent_silo";\n\t"read" if "read" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_silo";\n\t"list_children" if "read" on "parent_fleet";\n\t"read" if "read" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", user: SiloUser)\n\tif user.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", user: SiloUser)\n\tif user.silo.fleet = fleet;\n\n# authenticated actors have all permissions on themselves\nhas_permission(actor: AuthenticatedActor, _perm: String, silo_user: SiloUser)\n if actor.equals_silo_user(silo_user);\n\nhas_permission(actor: AuthenticatedActor, "read", silo_user: SiloUser)\n if actor.is_user and silo_user.silo in actor.silo;\n\nresource SiloGroup {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "read",\n\t "create_child",\n\t];\n\n\trelations = { parent_silo: Silo };\n\t"list_children" if "read" on "parent_silo";\n\t"read" if "read" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_silo";\n}\nhas_relation(silo: Silo, "parent_silo", group: SiloGroup)\n\tif group.silo = silo;\n\nresource SshKey {\n\tpermissions = [ "read", "modify" ];\n\trelations = { silo_user: SiloUser };\n\n\t"read" if "read" on "silo_user";\n}\n# We want to allow the user to modify the ssh key but disallow a SCIM IdP token\n# from doing the same.\nhas_permission(actor: AuthenticatedActor, "modify", ssh_key: SshKey)\n\tif actor.is_user and has_permission(actor, "modify", ssh_key.silo_user);\nhas_relation(user: SiloUser, "silo_user", ssh_key: SshKey)\n\tif ssh_key.silo_user = user;\n\nresource IdentityProvider {\n\tpermissions = [\n\t "read",\n\t "modify",\n\t "create_child",\n\t "list_children",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t"read" if "viewer" on "parent_silo";\n\t"list_children" if "viewer" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_silo";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t"read" if "viewer" on "parent_fleet";\n\t"list_children" if "viewer" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", identity_provider: IdentityProvider)\n\tif identity_provider.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: IdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource SamlIdentityProvider {\n\tpermissions = [\n\t "read",\n\t "modify",\n\t "create_child",\n\t "list_children",\n\t];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges on identity providers.\n\t"read" if "viewer" on "parent_silo";\n\t"list_children" if "viewer" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_silo";\n\n\t# Fleet-level roles also grant privileges on identity providers.\n\t"read" if "viewer" on "parent_fleet";\n\t"list_children" if "viewer" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", saml_identity_provider: SamlIdentityProvider)\n\tif saml_identity_provider.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: SamlIdentityProvider)\n\tif collection.silo.fleet = fleet;\n\nresource ScimClientBearerToken {\n\tpermissions = [ "read", "modify" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n # necessary to authenticate SCIM actors\n\t"read" if "external-authenticator" on "parent_fleet";\n\n\t# Silo-level roles grant privileges for SCIM client tokens.\n\t"read" if "admin" on "parent_silo";\n\t"modify" if "admin" on "parent_silo";\n\n\t# Fleet-level roles also grant privileges for SCIM client tokens.\n\t"read" if "admin" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", scim_client_bearer_token: ScimClientBearerToken)\n\tif scim_client_bearer_token.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: ScimClientBearerToken)\n\tif collection.silo.fleet = fleet;\n\n\n#\n# SYNTHETIC RESOURCES OUTSIDE THE SILO HIERARCHY\n#\n# The resources here do not correspond to anything that appears explicitly in\n# the API or is stored in the database. These are used either at the top level\n# of the API path (e.g., "/v1/system/ip-pools") or as an implementation detail of the system\n# (in the case of console sessions and "Database"). The policies are\n# either statically-defined in this file or driven by role assignments on the\n# Fleet. None of these resources defines their own roles.\n#\n\n# Describes the quiesce state of a particular Nexus instance.\n#\n# These authz checks must not require the database. We grant this directly to\n# callers of the internal API.\nresource QuiesceState {\n\tpermissions = [ "read", "modify" ];\n}\nhas_permission(USER_INTERNAL_API: AuthenticatedActor, "read", _q: QuiesceState);\nhas_permission(\n USER_INTERNAL_API: AuthenticatedActor,\n "modify",\n _q: QuiesceState\n);\n\n# Describes the policy for reading and modifying DNS configuration\n# (both internal and external)\nresource DnsConfig {\n\tpermissions = [ "read", "modify" ];\n\trelations = { parent_fleet: Fleet };\n\t# "external-authenticator" requires these permissions because that's the\n\t# context that Nexus uses when creating and deleting Silos. These\n\t# operations necessarily need to read and modify DNS configuration.\n\t"read" if "external-authenticator" on "parent_fleet";\n\t"modify" if "external-authenticator" on "parent_fleet";\n\t# "admin" on the parent fleet also gets these permissions, primarily for\n\t# the test suite.\n\t"read" if "admin" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", dns_config: DnsConfig)\n\tif dns_config.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource BlueprintConfig {\n\tpermissions = [\n\t "list_children", # list blueprints\n\t "create_child", # create blueprint\n\t "read", # read the current target\n\t "modify", # change the current target\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t"create_child" if "admin" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n\t"list_children" if "viewer" on "parent_fleet";\n\t"read" if "viewer" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", list: BlueprintConfig)\n\tif list.fleet = fleet;\n\n# Describes the policy for accessing "/v1/system/update/trust-roots" in the API\nresource UpdateTrustRootList {\n\tpermissions = [ "list_children", "create_child" ];\n\trelations = { parent_fleet: Fleet };\n\t"list_children" if "viewer" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", collection: UpdateTrustRootList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for accessing blueprints\nresource TargetReleaseConfig {\n\tpermissions = [\n\t "read", # read the current target release\n\t "modify", # change the current target release\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\t"read" if "viewer" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", resource: TargetReleaseConfig)\n\tif resource.fleet = fleet;\n\n# Describes the policy for reading and modifying low-level inventory\nresource Inventory {\n\tpermissions = [ "read", "modify" ];\n\trelations = { parent_fleet: Fleet };\n\t"read" if "viewer" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", inventory: Inventory)\n\tif inventory.fleet = fleet;\n\n# Describes the policy for accessing "/v1/system/ip-pools" in the API\nresource IpPoolList {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "create_child",\n\t];\n\n\t# Fleet Administrators can create or modify the IP Pools list.\n\trelations = { parent_fleet: Fleet };\n\t"modify" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n\n\t# Fleet Viewers can list IP Pools\n\t"list_children" if "viewer" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", ip_pool_list: IpPoolList)\n\tif ip_pool_list.fleet = fleet;\n\n# Any authenticated user can create a child of a provided IP Pool.\n# This is necessary to use the pools when provisioning instances.\nhas_permission(actor: AuthenticatedActor, "create_child", ip_pool: IpPool)\n\tif actor.is_user and silo in actor.silo and silo.fleet = ip_pool.fleet;\n\n# Describes the policy for accessing "/v1/multicast-groups" in the API\n# Groups are created when the first instance joins and deleted when the last leaves.\nresource MulticastGroupList {\n\tpermissions = [ "list_children" ];\n\n\trelations = { parent_fleet: Fleet };\n\n\t# Fleet Viewers can list multicast groups\n\t"list_children" if "viewer" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", multicast_group_list: MulticastGroupList)\n\tif multicast_group_list.fleet = fleet;\n\n# Any authenticated user can list multicast groups in their fleet.\n# This enables silo users to discover groups for attaching instances,\n# without requiring the Fleet::Viewer role.\nhas_permission(actor: AuthenticatedActor, "list_children", multicast_group_list: MulticastGroupList)\n\tif actor.is_user and silo in actor.silo and silo.fleet = multicast_group_list.fleet;\n\n# MulticastGroup is a fleet-level discovery resource.\n# Join/leave authorization is gated by Instance::Modify, not the group itself.\nresource MulticastGroup {\n\tpermissions = [ "read", "list_children" ];\n\trelations = { parent_fleet: Fleet };\n}\nhas_relation(fleet: Fleet, "parent_fleet", multicast_group: MulticastGroup)\n\tif multicast_group.fleet = fleet;\n\n# Any authenticated user can read multicast groups in their fleet\nhas_permission(actor: AuthenticatedActor, "read", multicast_group: MulticastGroup)\n\tif actor.is_user and silo in actor.silo and silo.fleet = multicast_group.fleet;\n\n# Any authenticated user can list members of multicast groups in their fleet\nhas_permission(actor: AuthenticatedActor, "list_children", multicast_group: MulticastGroup)\n\tif actor.is_user and silo in actor.silo and silo.fleet = multicast_group.fleet;\n\n# Describes the policy for reading and writing the audit log\nresource AuditLog {\n\tpermissions = [\n\t "list_children", # retrieve audit log\n\t "create_child", # create audit log entry\n\t];\n\n\trelations = { parent_fleet: Fleet };\n\n\t# Fleet viewers can read the audit log\n\t"list_children" if "viewer" on "parent_fleet";\n}\n\n# Any actor should be able to write to the audit log because we need to be able\n# to write to the log from any request, authenticated or not. Audit log writes\n# are always a byproduct of other operations: there are no endpoints that allow\n# the user to write to the log deliberately. Note we use AuthenticatedActor\n# because we don't really mean unauthenticated -- in the case of login\n# operations, we use the external authenticator actor that creates the session\n# to authorize the audit log write.\nhas_permission(_actor: AuthenticatedActor, "create_child", _audit_log: AuditLog);\n\nhas_relation(fleet: Fleet, "parent_fleet", audit_log: AuditLog)\n\tif audit_log.fleet = fleet;\n\n# Describes the policy for creating and managing web console sessions.\nresource ConsoleSessionList {\n\tpermissions = [ "create_child" ];\n\trelations = { parent_fleet: Fleet };\n\t"create_child" if "external-authenticator" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", collection: ConsoleSessionList)\n\tif collection.fleet = fleet;\n\n# Allow silo admins to delete and list user sessions\nresource SiloUserSessionList {\n permissions = [ "modify", "list_children" ];\n relations = { parent_silo: Silo };\n\n # A silo admin can modify (e.g., delete) a user's sessions.\n "modify" if "admin" on "parent_silo";\n\n # A silo admin can list a user's sessions.\n "list_children" if "admin" on "parent_silo";\n}\nhas_relation(silo: Silo, "parent_silo", authn_list: SiloUserSessionList)\n if authn_list.silo_user.silo = silo;\n\n# give users 'modify' and 'list_children' on their own sessions\nhas_permission(actor: AuthenticatedActor, "modify", authn_list: SiloUserSessionList)\n if actor.equals_silo_user(authn_list.silo_user);\nhas_permission(actor: AuthenticatedActor, "list_children", authn_list: SiloUserSessionList)\n if actor.equals_silo_user(authn_list.silo_user);\n\n# Allow silo admins to delete and list user access tokens\nresource SiloUserTokenList {\n permissions = [ "modify", "list_children" ];\n relations = { parent_silo: Silo };\n\n # A silo admin can modify (e.g., delete) a user's tokens.\n "modify" if "admin" on "parent_silo";\n\n # A silo admin can list a user's tokens.\n "list_children" if "admin" on "parent_silo";\n}\nhas_relation(silo: Silo, "parent_silo", authn_list: SiloUserTokenList)\n if authn_list.silo_user.silo = silo;\n\n# give users 'modify' and 'list_children' on their own tokens\nhas_permission(actor: AuthenticatedActor, "modify", authn_list: SiloUserTokenList)\n if actor.equals_silo_user(authn_list.silo_user);\nhas_permission(actor: AuthenticatedActor, "list_children", authn_list: SiloUserTokenList)\n if actor.equals_silo_user(authn_list.silo_user);\n\n# Describes the policy for creating and managing device authorization requests.\nresource DeviceAuthRequestList {\n\tpermissions = [ "create_child" ];\n\trelations = { parent_fleet: Fleet };\n\t"create_child" if "external-authenticator" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", collection: DeviceAuthRequestList)\n\tif collection.fleet = fleet;\n\n# Describes the policy for creating and managing trust quorum configurations\n# This may change in a multirack future to a per rack parent\nresource TrustQuorumConfig {\n permissions = [ "read", "modify" ];\n\trelations = { parent_fleet: Fleet };\n\t"read" if "viewer" on "parent_fleet";\n\t"modify" if "admin" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", config: TrustQuorumConfig)\n\tif config.rack.fleet = fleet;\n\n# Describes the policy for creating and managing Silo certificates\nresource SiloCertificateList {\n\tpermissions = [ "list_children", "create_child" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Both Fleet and Silo administrators can see and modify the Silo's\n\t# certificates.\n\t"list_children" if "admin" on "parent_silo";\n\t"list_children" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", collection: SiloCertificateList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: SiloCertificateList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo identity providers\nresource SiloIdentityProviderList {\n\tpermissions = [ "list_children", "create_child" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the identity providers in it.\n\t"list_children" if "read" on "parent_silo";\n\n\t# Fleet and Silo administrators can manage the Silo's identity provider\n\t# configuration. This is one of the only areas of Silo configuration\n\t# that Fleet Administrators have permissions on. This is also one of\n\t# the only cases where we need to look two levels up the hierarchy to\n\t# see if somebody has the right permission. For most other things,\n\t# permissions cascade down the hierarchy so we only need to look at the\n\t# parent.\n\t"create_child" if "admin" on "parent_silo";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", collection: SiloIdentityProviderList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: SiloIdentityProviderList)\n\tif collection.silo.fleet = fleet;\n\n# Describes the policy for creating and managing Silo users (mostly intended for\n# API-managed users)\nresource SiloUserList {\n\tpermissions = [ "list_children", "create_child" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the users in the\n\t# Silo) can see the users in it.\n\t"list_children" if "read" on "parent_silo";\n\n\t# Fleet and Silo administrators can manage the Silo's users. This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on. This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission. For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t"create_child" if "admin" on "parent_silo";\n\t"list_children" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", collection: SiloUserList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: SiloUserList)\n\tif collection.silo.fleet = fleet;\n\n# Grant SCIM IdP actors the permissions they need on users.\nhas_permission(actor: AuthenticatedActor, "read", silo_user: SiloUser)\n if actor.is_scim_idp and silo_user.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, "create_child", silo_user_list: SiloUserList)\n\tif actor.is_scim_idp and silo_user_list.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, "modify", silo_user: SiloUser)\n\tif actor.is_scim_idp and silo_user.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, "list_children", silo_user_list: SiloUserList)\n if actor.is_scim_idp and silo_user_list.silo in actor.silo;\n\n# Describes the policy for creating and managing Silo groups (mostly intended\n# for API-managed groups)\nresource SiloGroupList {\n\tpermissions = [ "list_children", "create_child" ];\n\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Everyone who can read the Silo (which includes all the groups in the\n\t# Silo) can see the groups in it.\n\t"list_children" if "read" on "parent_silo";\n\n\t# Fleet and Silo administrators can manage the Silo's groups. This is\n\t# one of the only areas of Silo configuration that Fleet Administrators\n\t# have permissions on. This is also one of the few cases (so far) where\n\t# we need to look two levels up the hierarchy to see if somebody has the\n\t# right permission. For most other things, permissions cascade down the\n\t# hierarchy so we only need to look at the parent.\n\t"create_child" if "admin" on "parent_silo";\n\t"list_children" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", collection: SiloGroupList)\n\tif collection.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: SiloGroupList)\n\tif collection.silo.fleet = fleet;\n\n# Grant SCIM IdP actors the permissions they need on groups.\nhas_permission(actor: AuthenticatedActor, "read", silo_group: SiloGroup)\n if actor.is_scim_idp and silo_group.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, "create_child", silo_group_list: SiloGroupList)\n\tif actor.is_scim_idp and silo_group_list.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, "modify", silo_group: SiloGroup)\n\tif actor.is_scim_idp and silo_group.silo in actor.silo;\nhas_permission(actor: AuthenticatedActor, "list_children", silo_group_list: SiloGroupList)\n if actor.is_scim_idp and silo_group_list.silo in actor.silo;\n\n# These rules grants the external authenticator role the permissions it needs to\n# read silo users and modify their sessions. This is necessary for login to\n# work.\nhas_permission(actor: AuthenticatedActor, "read", silo: Silo)\n\tif has_role(actor, "external-authenticator", silo.fleet);\nhas_permission(actor: AuthenticatedActor, "read", user: SiloUser)\n\tif has_role(actor, "external-authenticator", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, "modify", user: SiloUser)\n\tif has_role(actor, "external-authenticator", user.silo.fleet);\nhas_permission(actor: AuthenticatedActor, "read", group: SiloGroup)\n\tif has_role(actor, "external-authenticator", group.silo.fleet);\nhas_permission(actor: AuthenticatedActor, "modify", group: SiloGroup)\n\tif has_role(actor, "external-authenticator", group.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, "read", session: ConsoleSession)\n\tif has_role(actor, "external-authenticator", session.fleet);\nhas_permission(actor: AuthenticatedActor, "modify", session: ConsoleSession)\n\tif has_role(actor, "external-authenticator", session.fleet);\n\n# All authenticated users can read and delete device authn requests because\n# by necessity these operations happen before we've figured out what user (or\n# even Silo) the device auth is associated with. Any user can claim a device\n# auth request with the right user code (that's how it works) -- it's the user\n# code and associated logic that prevents unauthorized access here.\nhas_permission(actor: AuthenticatedActor, "read", _device_auth: DeviceAuthRequest)\n if actor.is_user;\nhas_permission(actor: AuthenticatedActor, "modify", _device_auth: DeviceAuthRequest)\n if actor.is_user;\n\nhas_permission(actor: AuthenticatedActor, "read", device_token: DeviceAccessToken)\n\tif has_role(actor, "external-authenticator", device_token.fleet);\n\nhas_permission(actor: AuthenticatedActor, "read", identity_provider: IdentityProvider)\n\tif has_role(actor, "external-authenticator", identity_provider.silo.fleet);\n\nhas_permission(actor: AuthenticatedActor, "read", saml_identity_provider: SamlIdentityProvider)\n\tif has_role(actor, "external-authenticator", saml_identity_provider.silo.fleet);\n\n# Describes the policy for who can access the internal database.\nresource Database {\n\tpermissions = [\n\t # "query" is required to perform any query against the database,\n\t # whether a read or write query. This is checked when an operation\n\t # checks out a database connection from the connection pool.\n\t #\n\t # Any authenticated user gets this permission. There's generally\n\t # some other authz check involved in the database query. For\n\t # example, if you're querying the database to "read" a "Project", we\n\t # should also be checking that. So why do we do this at all? It's\n\t # a belt-and-suspenders measure so that if we somehow introduced an\n\t # unauthenticated code path that hits the database, it cannot be\n\t # used to DoS the database because we won't allow the operation to\n\t # make the query. (As long as the code path _is_ authenticated, we\n\t # can use throttling mechanisms to prevent DoS.)\n\t "query",\n\n\t # "modify" is required to populate database data that's delivered\n\t # with the system. It should also be required for schema changes,\n\t # when we support those. This is separate from "query" so that we\n\t # cannot accidentally invoke these code paths from API calls and\n\t # other general functions.\n\t "modify"\n\t];\n}\n\n# All authenticated users have the "query" permission on the database.\nhas_permission(_actor: AuthenticatedActor, "query", _resource: Database);\n\n# The "db-init" user is the only one with the "modify" permission.\nhas_permission(USER_DB_INIT: AuthenticatedActor, "modify", _resource: Database);\nhas_permission(USER_DB_INIT: AuthenticatedActor, "create_child", _resource: IpPoolList);\n# It also has "admin" on the internal silo to populate it with built-in resources.\n# TODO-completeness: actually limit to just internal silo and not all silos\nhas_role(USER_DB_INIT: AuthenticatedActor, "admin", _silo: Silo);\n\n# Allow the internal API admin permissions on all silos.\nhas_role(USER_INTERNAL_API: AuthenticatedActor, "admin", _silo: Silo);\n\nresource WebhookSecret {\n\tpermissions = [ "read", "modify" ];\n\trelations = { parent_alert_receiver: AlertReceiver };\n\n\t"read" if "read" on "parent_alert_receiver";\n\t"modify" if "modify" on "parent_alert_receiver";\n}\n\nhas_relation(rx: AlertReceiver, "parent_alert_receiver", secret: WebhookSecret)\n\tif secret.alert_receiver = rx;\n\nresource AlertClassList {\n\tpermissions = [ "list_children" ];\n\trelations = { parent_fleet: Fleet };\n\n\t"list_children" if "viewer" on "parent_fleet";\n}\n\nhas_relation(fleet: Fleet, "parent_fleet", collection: AlertClassList)\n\tif collection.fleet = fleet;\n\nresource ScimClientBearerTokenList {\n\tpermissions = [ "create_child", "list_children" ];\n\trelations = { parent_silo: Silo, parent_fleet: Fleet };\n\n\t# Silo-level roles grant privileges for SCIM client tokens.\n # These are all admin because being able to create these tokens would allow\n # a user to grant themselves admin by modifying group membership through SCIM calls\n\t"create_child" if "admin" on "parent_silo";\n\t"list_children" if "admin" on "parent_silo";\n\n # Fleet-level roles also grant privileges for SCIM client tokens, for\n # configuration before silo admins are present.\n\t"create_child" if "admin" on "parent_fleet";\n\t"list_children" if "admin" on "parent_fleet";\n}\nhas_relation(silo: Silo, "parent_silo", scim_client_bearer_token_list: ScimClientBearerTokenList)\n\tif scim_client_bearer_token_list.silo = silo;\nhas_relation(fleet: Fleet, "parent_fleet", collection: ScimClientBearerTokenList)\n\tif collection.silo.fleet = fleet;\n\n# VpcList is a synthetic resource for controlling VPC creation.\n# Unlike other project resources, VPC creation requires the full "collaborator"\n# role rather than "limited-collaborator", enforcing the networking restriction.\n# This allows organizations to restrict who can reconfigure the network topology\n# while still allowing users with limited-collaborator to work with compute\n# resources (instances, disks, etc.) within the existing network.\nresource VpcList {\n\tpermissions = [ "list_children", "create_child" ];\n\n\trelations = { containing_project: Project };\n\n\t"list_children" if "read" on "containing_project";\n\t"create_child" if "collaborator" on "containing_project";\n}\nhas_relation(project: Project, "containing_project", collection: VpcList)\n\tif collection.project = project;\n\n# Describes the policy for accessing "/v1/system/subnet-pools" in the API\nresource SubnetPoolList {\n\tpermissions = [\n\t "list_children",\n\t "modify",\n\t "create_child",\n\t];\n\n\t# Fleet Administrators can create or modify the Subnet Pools list.\n\trelations = { parent_fleet: Fleet };\n\t"modify" if "admin" on "parent_fleet";\n\t"create_child" if "admin" on "parent_fleet";\n\n\t# Fleet Viewers can list External Subnet Pools\n\t"list_children" if "viewer" on "parent_fleet";\n}\nhas_relation(fleet: Fleet, "parent_fleet", subnet_pool_list: SubnetPoolList)\n\tif subnet_pool_list.fleet = fleet;\n\n\n\n resource Disk {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "limited-collaborator" on "containing_project";\n "create_child" if "limited-collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: Disk)\n if child.project = parent;\n \n\n resource Snapshot {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "limited-collaborator" on "containing_project";\n "create_child" if "limited-collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: Snapshot)\n if child.project = parent;\n \n\n resource ProjectImage {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "limited-collaborator" on "containing_project";\n "create_child" if "limited-collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: ProjectImage)\n if child.project = parent;\n \n\n resource AffinityGroup {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "limited-collaborator" on "containing_project";\n "create_child" if "limited-collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: AffinityGroup)\n if child.project = parent;\n \n\n resource AntiAffinityGroup {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "limited-collaborator" on "containing_project";\n "create_child" if "limited-collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: AntiAffinityGroup)\n if child.project = parent;\n \n\n resource Instance {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "limited-collaborator" on "containing_project";\n "create_child" if "limited-collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: Instance)\n if child.project = parent;\n \n\n resource IpPool {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: IpPool)\n if child.fleet = fleet;\n \n\n resource InstanceNetworkInterface {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: Instance\n };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "limited-collaborator" on "containing_project";\n "create_child" if "limited-collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: InstanceNetworkInterface)\n if has_relation(project, "containing_project", child.instance);\n\n has_relation(parent: Instance, "parent", child: InstanceNetworkInterface)\n if child.instance = parent;\n \n\n resource Vpc {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: Vpc)\n if child.project = parent;\n \n\n resource VpcRouter {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: Vpc\n };\n\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: VpcRouter)\n if has_relation(project, "containing_project", child.vpc);\n\n has_relation(parent: Vpc, "parent", child: VpcRouter)\n if child.vpc = parent;\n \n\n resource InternetGateway {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: Vpc\n };\n\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: InternetGateway)\n if has_relation(project, "containing_project", child.vpc);\n\n has_relation(parent: Vpc, "parent", child: InternetGateway)\n if child.vpc = parent;\n \n\n resource InternetGatewayIpPool {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: InternetGateway\n };\n\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: InternetGatewayIpPool)\n if has_relation(project, "containing_project", child.internet_gateway);\n\n has_relation(parent: InternetGateway, "parent", child: InternetGatewayIpPool)\n if child.internet_gateway = parent;\n \n\n resource InternetGatewayIpAddress {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: InternetGateway\n };\n\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: InternetGatewayIpAddress)\n if has_relation(project, "containing_project", child.internet_gateway);\n\n has_relation(parent: InternetGateway, "parent", child: InternetGatewayIpAddress)\n if child.internet_gateway = parent;\n \n\n resource RouterRoute {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: VpcRouter\n };\n\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: RouterRoute)\n if has_relation(project, "containing_project", child.vpc_router);\n\n has_relation(parent: VpcRouter, "parent", child: RouterRoute)\n if child.vpc_router = parent;\n \n\n resource VpcSubnet {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = {\n containing_project: Project,\n parent: Vpc\n };\n\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "collaborator" on "containing_project";\n "create_child" if "collaborator" on "containing_project";\n }\n\n has_relation(project: Project, "containing_project", child: VpcSubnet)\n if has_relation(project, "containing_project", child.vpc);\n\n has_relation(parent: Vpc, "parent", child: VpcSubnet)\n if child.vpc = parent;\n \n\n resource FloatingIp {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "limited-collaborator" on "containing_project";\n "create_child" if "limited-collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: FloatingIp)\n if child.project = parent;\n \n\n resource ExternalSubnet {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_project: Project };\n "list_children" if "viewer" on "containing_project";\n "read" if "viewer" on "containing_project";\n "modify" if "limited-collaborator" on "containing_project";\n "create_child" if "limited-collaborator" on "containing_project";\n }\n\n has_relation(parent: Project, "containing_project", child: ExternalSubnet)\n if child.project = parent;\n \n\n resource Image {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_silo: Silo };\n "list_children" if "viewer" on "containing_silo";\n "read" if "viewer" on "containing_silo";\n "modify" if "collaborator" on "containing_silo";\n "create_child" if "collaborator" on "containing_silo";\n }\n\n has_relation(parent: Silo, "containing_silo", child: Image)\n if child.silo = parent;\n \n\n resource SiloImage {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n\n relations = { containing_silo: Silo };\n "list_children" if "viewer" on "containing_silo";\n "read" if "viewer" on "containing_silo";\n "modify" if "collaborator" on "containing_silo";\n "create_child" if "collaborator" on "containing_silo";\n }\n\n has_relation(parent: Silo, "containing_silo", child: SiloImage)\n if child.silo = parent;\n \n\n resource AddressLot {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: AddressLot)\n if child.fleet = fleet;\n \n\n resource Blueprint {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Blueprint)\n if child.fleet = fleet;\n \n\n resource LoopbackAddress {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: LoopbackAddress)\n if child.fleet = fleet;\n \n\n\n resource ConsoleSession {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: ConsoleSession)\n if child.fleet = fleet;\n \n\n resource DeviceAuthRequest {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: DeviceAuthRequest)\n if child.fleet = fleet;\n \n\n resource DeviceAccessToken {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: DeviceAccessToken)\n if child.fleet = fleet;\n \n\n resource PhysicalDisk {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: PhysicalDisk)\n if child.fleet = fleet;\n \n\n resource Rack {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Rack)\n if child.fleet = fleet;\n \n\n\n\n\n\n resource SupportBundle {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: SupportBundle)\n if child.fleet = fleet;\n \n\n\n\n resource Sled {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Sled)\n if child.fleet = fleet;\n \n\n resource SubnetPool {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: SubnetPool)\n if child.fleet = fleet;\n \n\n resource TufRepo {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: TufRepo)\n if child.fleet = fleet;\n \n\n resource TufArtifact {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: TufArtifact)\n if child.fleet = fleet;\n \n\n resource TufTrustRoot {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: TufTrustRoot)\n if child.fleet = fleet;\n \n\n resource Alert {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Alert)\n if child.fleet = fleet;\n \n\n resource AlertReceiver {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: AlertReceiver)\n if child.fleet = fleet;\n \n\n\n resource Zpool {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Zpool)\n if child.fleet = fleet;\n \n\n resource Service {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: Service)\n if child.fleet = fleet;\n \n\n resource UserBuiltin {\n permissions = [\n "list_children",\n "modify",\n "read",\n "create_child",\n ];\n \n relations = { parent_fleet: Fleet };\n "list_children" if "viewer" on "parent_fleet";\n "read" if "viewer" on "parent_fleet";\n "modify" if "admin" on "parent_fleet";\n "create_child" if "admin" on "parent_fleet";\n }\n has_relation(fleet: Fleet, "parent_fleet", child: UserBuiltin)\n if child.fleet = fleet;\n \n\n file = nexus/auth/src/authz/oso_generic.rs:89
862026-07-02T21:44:57.538ZINFOnexus (ServerContext): Setting up resolver using DNS servers for subnet: Ipv6Subnet { net: Ipv6Net { addr: fd00:1122:3344::, width: 48 } } file = nexus/src/context.rs:235
872026-07-02T21:44:57.541ZINFOnexus (DnsResolver): new DNS resolver addresses = [[fd00:1122:3344:1::1]:53, [fd00:1122:3344:2::1]:53, [fd00:1122:3344:3::1]:53] file = internal-dns/resolver/src/resolver.rs:144
882026-07-02T21:44:57.544ZINFOnexus (ServerContext): Setting up qorb database pool from DNS dns_addrs = [[fd00:1122:3344:1::1]:53, [fd00:1122:3344:2::1]:53, [fd00:1122:3344:3::1]:53] file = nexus/src/context.rs:291
892026-07-02T21:44:57.553ZDEBGnexus (ServerContext): registered USDT probes
902026-07-02T21:44:57.925ZINFOnexus (datastore): Database schema version is up to date desired_version = 274.0.0 file = nexus/db-queries/src/db/datastore/db_metadata.rs:420 found_version = 274.0.0
912026-07-02T21:44:57.965ZWARNnexus (datastore): No db_metadata_nexus records exist - skipping access check explanation = This is expected during initial deployment or before migration file = nexus/db-queries/src/db/datastore/db_metadata.rs:348 nexus_id = 02c39b09-4b74-4e4c-af9d-5e4bdd5bda96 (omicron_zone)
922026-07-02T21:44:57.965ZINFOnexus: Datastore is ready for usage file = nexus/db-queries/src/db/datastore/mod.rs:350
932026-07-02T21:44:57.968ZINFOnexus (SEC): SEC running file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/steno-0.4.1/src/sec.rs:813 sec_id = 02c39b09-4b74-4e4c-af9d-5e4bdd5bda96
942026-07-02T21:44:57.987ZDEBGnexus (clickhouse-client): registered USDT probes id = 5fe87cd7-8e63-499a-abee-1d6cf7e57b40
952026-07-02T21:44:58.009ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
962026-07-02T21:44:58.012ZINFOnexus (MgsUpdateDriver): starting MgsUpdateDriver file = nexus/mgs-updates/src/driver.rs:146
972026-07-02T21:44:58.028ZDEBGnexus (DataLoader): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
982026-07-02T21:44:58.029ZDEBGnexus (DataLoader): attempting to create built-in users
992026-07-02T21:44:58.032ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
1002026-07-02T21:44:58.032ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
1012026-07-02T21:44:58.054ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /crucible/0/upstairs/{upstairs_id}/downstairs/{downstairs_id}/stop-request versions = all
1022026-07-02T21:44:58.054ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /crucible/0/upstairs/{upstairs_id}/downstairs/{downstairs_id}/stopped versions = all
1032026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /crucible/0/upstairs/{upstairs_id}/repair/{repair_id}/progress versions = all
1042026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /crucible/0/upstairs/{upstairs_id}/repair-finish versions = all
1052026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /crucible/0/upstairs/{upstairs_id}/repair-start versions = all
1062026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /disk/{disk_id}/remove-read-only-parent versions = all
1072026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = PUT path = /disks/{disk_id} versions = all
1082026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /metrics/collectors versions = all
1092026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = GET path = /metrics/collectors/{collector_id}/producers versions = all
1102026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /metrics/producers versions = all
1112026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = GET path = /nat/ipv4/changeset/{from_gen} versions = all
1122026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = GET path = /probes/{sled} versions = all
1132026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /refresh-vpc-routes versions = all
1142026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = GET path = /sled-agents/{sled_id} versions = all
1152026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /sled-agents/{sled_id} versions = all
1162026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = PUT path = /switch/{switch_id} versions = all
1172026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = GET path = /v1/ping versions = all
1182026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = PUT path = /vmms/{propolis_id} versions = all
1192026-07-02T21:44:58.055ZDEBGnexus (dropshot_internal): registered endpoint local_addr = [fd00:1122:3344:101::b]:12221 method = POST path = /volume/{volume_id}/remove-read-only-parent versions = all
1202026-07-02T21:44:58.055ZINFOnexus (dropshot_internal): listening file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:335 local_addr = [fd00:1122:3344:101::b]:12221
1212026-07-02T21:44:58.057ZDEBGnexus (dropshot_internal): successfully registered DTrace USDT probes local_addr = [fd00:1122:3344:101::b]:12221
1222026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /bgtasks versions = all
1232026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /bgtasks/activate versions = all
1242026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /bgtasks/view/{bgtask_name} versions = all
1252026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /clickhouse/policy versions = all
1262026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /clickhouse/policy versions = all
1272026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /debug/fetch-omdb-binary versions = all
1282026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /demo-saga versions = all
1292026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /demo-saga/{demo_saga_id}/complete versions = all
1302026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /deployment/blueprints/all versions = all
1312026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = DELETE path = /deployment/blueprints/all/{blueprint_id} versions = all
1322026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /deployment/blueprints/all/{blueprint_id} versions = all
1332026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /deployment/blueprints/import versions = all
1342026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /deployment/blueprints/regenerate versions = all
1352026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /deployment/blueprints/target versions = all
1362026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /deployment/blueprints/target versions = all
1372026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = PUT path = /deployment/blueprints/target/enabled versions = all
1382026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /deployment/reconfigurator-config versions = all
1392026-07-02T21:44:58.069ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /deployment/reconfigurator-config versions = all
1402026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /deployment/reconfigurator-config/{version} versions = all
1412026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /deployment/update-status versions = all
1422026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /experimental/v1/system/support-bundles versions = all
1432026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /experimental/v1/system/support-bundles versions = all
1442026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = DELETE path = /experimental/v1/system/support-bundles/{bundle_id} versions = all
1452026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /experimental/v1/system/support-bundles/{bundle_id} versions = all
1462026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = PUT path = /experimental/v1/system/support-bundles/{bundle_id} versions = all
1472026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /experimental/v1/system/support-bundles/{bundle_id}/download versions = all
1482026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = HEAD path = /experimental/v1/system/support-bundles/{bundle_id}/download versions = all
1492026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /experimental/v1/system/support-bundles/{bundle_id}/download/{file} versions = all
1502026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = HEAD path = /experimental/v1/system/support-bundles/{bundle_id}/download/{file} versions = all
1512026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /experimental/v1/system/support-bundles/{bundle_id}/index versions = all
1522026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /fm/known-ereport-classes versions = all
1532026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /instances/{instance_id}/migrate versions = all
1542026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /mgs-updates versions = all
1552026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /oximeter/read-policy versions = all
1562026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /oximeter/read-policy versions = all
1572026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /physical-disk/expunge versions = all
1582026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /quiesce versions = all
1592026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /quiesce versions = all
1602026-07-02T21:44:58.070ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = PUT path = /racks/{rack_id}/initialization-complete versions = all
1612026-07-02T21:44:58.071ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /sagas versions = all
1622026-07-02T21:44:58.071ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /sagas/{saga_id} versions = all
1632026-07-02T21:44:58.071ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /sleds/expunge versions = all
1642026-07-02T21:44:58.071ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /sleds/uninitialized versions = all
1652026-07-02T21:44:58.071ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /trust-quorum/config/{rack_id} versions = all
1662026-07-02T21:44:58.071ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /trust-quorum/lrtq-upgrade versions = all
1672026-07-02T21:44:58.071ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = POST path = /trust-quorum/remove/{sled} versions = all
1682026-07-02T21:44:58.071ZDEBGnexus (dropshot_lockstep): registered endpoint local_addr = [fd00:1122:3344:101::b]:12232 method = GET path = /v1/ping versions = all
1692026-07-02T21:44:58.071ZINFOnexus (dropshot_lockstep): listening file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:335 local_addr = [fd00:1122:3344:101::b]:12232
1702026-07-02T21:44:58.071ZDEBGnexus (dropshot_lockstep): successfully registered DTrace USDT probes local_addr = [fd00:1122:3344:101::b]:12232
1712026-07-02T21:44:58.071ZDEBGnexus (ServiceBalancer): roles roles = RoleSet { roles: {} }
1722026-07-02T21:44:58.071ZDEBGnexus (ServiceBalancer): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3 (built_in_user), .. }) resource = Database result = Ok(())
1732026-07-02T21:44:58.100ZWARNnexus: Cannot look up rack: Object (of type ById(760041b0-346a-4e2d-b462-53850ab36ff3)) not found: rack file = nexus/src/app/rack.rs:711
1742026-07-02T21:44:58.128ZINFOnexus (DataLoader): created 6 built-in users file = nexus/db-queries/src/db/datastore/silo_user.rs:913
1752026-07-02T21:44:58.130ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
1762026-07-02T21:44:58.131ZDEBGnexus (DataLoader): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
1772026-07-02T21:44:58.131ZDEBGnexus (DataLoader): attempting to create built-in role assignments
1782026-07-02T21:44:58.131ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
1792026-07-02T21:44:58.132ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
1802026-07-02T21:44:58.192ZINFOnexus (dropshot_internal): accepted connection file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:1057 local_addr = [fd00:1122:3344:101::b]:12221 remote_addr = [fd00:1122:3344:101::d]:56234
1812026-07-02T21:44:58.195ZDEBGnexus (dropshot_internal): determined request API version local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::d]:56234 req_id = aea6aa7b-9c86-435a-a8b4-daa33495bb3b uri = /metrics/collectors version = 1.0.0
1822026-07-02T21:44:58.206ZDEBGnexus (dropshot_internal): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::d]:56234 req_id = aea6aa7b-9c86-435a-a8b4-daa33495bb3b roles = RoleSet { roles: {} } type = user_builtin uri = /metrics/collectors user_builtin_id = 001de000-05e4-4000-8000-000000000002
1832026-07-02T21:44:58.207ZDEBGnexus (dropshot_internal): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::d]:56234 req_id = aea6aa7b-9c86-435a-a8b4-daa33495bb3b resource = Database result = Ok(()) type = user_builtin uri = /metrics/collectors user_builtin_id = 001de000-05e4-4000-8000-000000000002
1842026-07-02T21:44:58.300ZINFOnexus: registered new oximeter metric collection server address = [fd00:1122:3344:101::d]:12223 collector_id = 84093dc6-9d7e-44c3-ac89-48bb7e36e692 file = nexus/src/app/oximeter.rs:41
1852026-07-02T21:44:58.302ZINFOnexus (dropshot_internal): request completed file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:874 latency_us = 107317 local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::d]:56234 req_id = aea6aa7b-9c86-435a-a8b4-daa33495bb3b response_code = 204 uri = /metrics/collectors
1862026-07-02T21:44:58.390ZINFOnexus (dropshot_internal): accepted connection file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:1057 local_addr = [fd00:1122:3344:101::b]:12221 remote_addr = [fd00:1122:3344:101::2]:61919
1872026-07-02T21:44:58.394ZDEBGnexus (dropshot_internal): determined request API version local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:61919 req_id = 5b9b2501-d2d4-41db-9e24-c98711b89aac uri = /metrics/producers version = 1.0.0
1882026-07-02T21:44:58.404ZDEBGnexus (dropshot_internal): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:61919 req_id = 5b9b2501-d2d4-41db-9e24-c98711b89aac roles = RoleSet { roles: {} } type = user_builtin uri = /metrics/producers user_builtin_id = 001de000-05e4-4000-8000-000000000002
1892026-07-02T21:44:58.404ZDEBGnexus (dropshot_internal): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:61919 req_id = 5b9b2501-d2d4-41db-9e24-c98711b89aac resource = Database result = Ok(()) type = user_builtin uri = /metrics/producers user_builtin_id = 001de000-05e4-4000-8000-000000000002
1902026-07-02T21:44:58.726ZINFOnexus (DataLoader): created 5 built-in role assignments file = nexus/db-queries/src/db/datastore/role.rs:55
1912026-07-02T21:44:58.726ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
1922026-07-02T21:44:58.727ZDEBGnexus (DataLoader): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
1932026-07-02T21:44:58.727ZDEBGnexus (DataLoader): attempting to create built-in silos
1942026-07-02T21:44:58.727ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
1952026-07-02T21:44:58.727ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
1962026-07-02T21:44:58.876ZINFOnexus (DataLoader): created 2 built-in silos file = nexus/db-queries/src/db/datastore/silo.rs:102
1972026-07-02T21:44:58.878ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
1982026-07-02T21:44:58.879ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
1992026-07-02T21:44:58.906ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2002026-07-02T21:44:58.907ZDEBGnexus (DataLoader): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2012026-07-02T21:44:58.907ZDEBGnexus (DataLoader): attempting to create built-in projects
2022026-07-02T21:44:58.909ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2032026-07-02T21:44:58.910ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2042026-07-02T21:44:58.916ZINFOnexus (dropshot_internal): accepted connection file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:1057 local_addr = [fd00:1122:3344:101::b]:12221 remote_addr = [fd00:1122:3344:101::2]:37142
2052026-07-02T21:44:58.917ZDEBGnexus (dropshot_internal): determined request API version local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:37142 req_id = df7a49df-5d4a-40e7-b6d6-f900fba945b1 uri = /metrics/producers version = 1.0.0
2062026-07-02T21:44:58.917ZDEBGnexus (dropshot_internal): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:37142 req_id = df7a49df-5d4a-40e7-b6d6-f900fba945b1 roles = RoleSet { roles: {} } type = user_builtin uri = /metrics/producers user_builtin_id = 001de000-05e4-4000-8000-000000000002
2072026-07-02T21:44:58.917ZDEBGnexus (dropshot_internal): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:37142 req_id = df7a49df-5d4a-40e7-b6d6-f900fba945b1 resource = Database result = Ok(()) type = user_builtin uri = /metrics/producers user_builtin_id = 001de000-05e4-4000-8000-000000000002
2082026-07-02T21:44:58.930ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2092026-07-02T21:44:58.930ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2102026-07-02T21:44:58.960ZINFOnexus: assigned collector to new producer collector_id = 84093dc6-9d7e-44c3-ac89-48bb7e36e692 file = nexus/src/app/oximeter.rs:76 producer_id = ee78ede5-d0ad-4a9a-b7b8-766b65c5cdd8
2112026-07-02T21:44:58.961ZINFOnexus (dropshot_internal): request completed file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:874 latency_us = 567437 local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:61919 req_id = 5b9b2501-d2d4-41db-9e24-c98711b89aac response_code = 201 uri = /metrics/producers
2122026-07-02T21:44:59.128ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2132026-07-02T21:44:59.128ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2142026-07-02T21:44:59.133ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2152026-07-02T21:44:59.135ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) } result = Ok(())
2162026-07-02T21:44:59.135ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2172026-07-02T21:44:59.135ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2182026-07-02T21:44:59.137ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2192026-07-02T21:44:59.137ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2202026-07-02T21:44:59.207ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2212026-07-02T21:44:59.209ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) } result = Ok(())
2222026-07-02T21:44:59.209ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2232026-07-02T21:44:59.209ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2242026-07-02T21:44:59.259ZINFOnexus (DataLoader): created built-in services project file = nexus/db-queries/src/db/datastore/project.rs:122
2252026-07-02T21:44:59.259ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2262026-07-02T21:44:59.260ZDEBGnexus (DataLoader): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2272026-07-02T21:44:59.260ZDEBGnexus (DataLoader): attempting to create built-in VPCs
2282026-07-02T21:44:59.260ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2292026-07-02T21:44:59.260ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2302026-07-02T21:44:59.270ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2312026-07-02T21:44:59.270ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2322026-07-02T21:44:59.272ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2332026-07-02T21:44:59.272ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2342026-07-02T21:44:59.275ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2352026-07-02T21:44:59.275ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2362026-07-02T21:44:59.276ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2372026-07-02T21:44:59.277ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2382026-07-02T21:44:59.358ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2392026-07-02T21:44:59.362ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) } result = Ok(())
2402026-07-02T21:44:59.362ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2412026-07-02T21:44:59.362ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2422026-07-02T21:44:59.368ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2432026-07-02T21:44:59.368ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2442026-07-02T21:44:59.370ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2452026-07-02T21:44:59.370ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2462026-07-02T21:44:59.372ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2472026-07-02T21:44:59.375ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) } result = Ok(())
2482026-07-02T21:44:59.375ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2492026-07-02T21:44:59.375ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2502026-07-02T21:44:59.376ZINFOnexus: assigned collector to new producer collector_id = 84093dc6-9d7e-44c3-ac89-48bb7e36e692 file = nexus/src/app/oximeter.rs:76 producer_id = ee78ede5-d0ad-4a9a-b7b8-766b65c5cdd8
2512026-07-02T21:44:59.376ZINFOnexus (dropshot_internal): request completed file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:874 latency_us = 458808 local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:37142 req_id = df7a49df-5d4a-40e7-b6d6-f900fba945b1 response_code = 201 uri = /metrics/producers
2522026-07-02T21:44:59.387ZINFOnexus (dropshot_lockstep): accepted connection file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:1057 local_addr = [fd00:1122:3344:101::b]:12232 remote_addr = [fd00:1122:3344:101::1]:35056
2532026-07-02T21:44:59.412ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2542026-07-02T21:44:59.413ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2552026-07-02T21:44:59.415ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2562026-07-02T21:44:59.415ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2572026-07-02T21:44:59.417ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2582026-07-02T21:44:59.417ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2592026-07-02T21:44:59.417ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2602026-07-02T21:44:59.418ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2612026-07-02T21:44:59.419ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2622026-07-02T21:44:59.421ZDEBGnexus (dropshot_lockstep): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 resource = Fleet result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2632026-07-02T21:44:59.424ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2642026-07-02T21:44:59.425ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2652026-07-02T21:44:59.456ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2662026-07-02T21:44:59.456ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2672026-07-02T21:44:59.525ZINFOnexus (dropshot_lockstep): set cockroachdb setting authenticated = true file = nexus/db-queries/src/db/datastore/cockroachdb_settings.rs:121 local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 setting = cluster.preserve_downgrade_option type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002 value = 22.1
2682026-07-02T21:44:59.526ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2692026-07-02T21:44:59.526ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2702026-07-02T21:44:59.580ZINFOnexus (dropshot_internal): accepted connection file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:1057 local_addr = [fd00:1122:3344:101::b]:12221 remote_addr = [fd00:1122:3344:101::2]:57998
2712026-07-02T21:44:59.581ZDEBGnexus (dropshot_internal): determined request API version local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:57998 req_id = be58bdad-4946-4c6f-ac7d-9f4f7e64e870 uri = /metrics/producers version = 1.0.0
2722026-07-02T21:44:59.581ZDEBGnexus (dropshot_internal): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:57998 req_id = be58bdad-4946-4c6f-ac7d-9f4f7e64e870 roles = RoleSet { roles: {} } type = user_builtin uri = /metrics/producers user_builtin_id = 001de000-05e4-4000-8000-000000000002
2732026-07-02T21:44:59.582ZDEBGnexus (dropshot_internal): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:57998 req_id = be58bdad-4946-4c6f-ac7d-9f4f7e64e870 resource = Database result = Ok(()) type = user_builtin uri = /metrics/producers user_builtin_id = 001de000-05e4-4000-8000-000000000002
2742026-07-02T21:44:59.598ZINFOnexus (dropshot_lockstep): request completed error_message_external = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" error_message_internal = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:862 latency_us = 210506 local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = f27f06b9-6be4-4537-98ab-efa19c1455c0 response_code = 404 uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete
2752026-07-02T21:44:59.745ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = bba367f8-96a3-4e70-9048-9c7feb4f4b6c roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2762026-07-02T21:44:59.745ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = bba367f8-96a3-4e70-9048-9c7feb4f4b6c resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2772026-07-02T21:44:59.752ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = bba367f8-96a3-4e70-9048-9c7feb4f4b6c roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2782026-07-02T21:44:59.754ZDEBGnexus (dropshot_lockstep): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = bba367f8-96a3-4e70-9048-9c7feb4f4b6c resource = Fleet result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2792026-07-02T21:44:59.754ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = bba367f8-96a3-4e70-9048-9c7feb4f4b6c roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2802026-07-02T21:44:59.754ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = bba367f8-96a3-4e70-9048-9c7feb4f4b6c resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2812026-07-02T21:44:59.756ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = bba367f8-96a3-4e70-9048-9c7feb4f4b6c roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2822026-07-02T21:44:59.757ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = bba367f8-96a3-4e70-9048-9c7feb4f4b6c resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2832026-07-02T21:44:59.758ZINFOnexus (dropshot_lockstep): request completed error_message_external = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" error_message_internal = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:862 latency_us = 14043 local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = bba367f8-96a3-4e70-9048-9c7feb4f4b6c response_code = 404 uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete
2842026-07-02T21:44:59.911ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 30fa3613-d5de-4d4e-b140-14d151a61e48 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2852026-07-02T21:44:59.911ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 30fa3613-d5de-4d4e-b140-14d151a61e48 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2862026-07-02T21:44:59.975ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2872026-07-02T21:44:59.978ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 30fa3613-d5de-4d4e-b140-14d151a61e48 roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2882026-07-02T21:44:59.979ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName("oxide-services") } result = Ok(())
2892026-07-02T21:44:59.979ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2902026-07-02T21:44:59.979ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2912026-07-02T21:44:59.980ZDEBGnexus (dropshot_lockstep): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 30fa3613-d5de-4d4e-b140-14d151a61e48 resource = Fleet result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2922026-07-02T21:44:59.980ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 30fa3613-d5de-4d4e-b140-14d151a61e48 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2932026-07-02T21:44:59.980ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 30fa3613-d5de-4d4e-b140-14d151a61e48 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
2942026-07-02T21:44:59.990ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2952026-07-02T21:44:59.990ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2962026-07-02T21:45:00.058ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2972026-07-02T21:45:00.059ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
2982026-07-02T21:45:00.067ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
2992026-07-02T21:45:00.067ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3002026-07-02T21:45:00.076ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 30fa3613-d5de-4d4e-b140-14d151a61e48 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3012026-07-02T21:45:00.076ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 30fa3613-d5de-4d4e-b140-14d151a61e48 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3022026-07-02T21:45:00.078ZINFOnexus (dropshot_lockstep): request completed error_message_external = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" error_message_internal = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:862 latency_us = 167554 local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 30fa3613-d5de-4d4e-b140-14d151a61e48 response_code = 404 uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete
3032026-07-02T21:45:00.101ZDEBGnexus (ServiceBalancer): roles roles = RoleSet { roles: {} }
3042026-07-02T21:45:00.102ZDEBGnexus (ServiceBalancer): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-00000000bac3 (built_in_user), .. }) resource = Database result = Ok(())
3052026-07-02T21:45:00.102ZINFOnexus: assigned collector to new producer collector_id = 84093dc6-9d7e-44c3-ac89-48bb7e36e692 file = nexus/src/app/oximeter.rs:76 producer_id = 5e8b8f5d-8aff-47dd-988a-f39929e721dc
3062026-07-02T21:45:00.102ZINFOnexus (dropshot_internal): request completed file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:874 latency_us = 520647 local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::2]:57998 req_id = be58bdad-4946-4c6f-ac7d-9f4f7e64e870 response_code = 201 uri = /metrics/producers
3072026-07-02T21:45:00.104ZWARNnexus: Cannot look up rack: Object (of type ById(760041b0-346a-4e2d-b462-53850ab36ff3)) not found: rack file = nexus/src/app/rack.rs:711
3082026-07-02T21:45:00.131ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3092026-07-02T21:45:00.132ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3102026-07-02T21:45:00.183ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3112026-07-02T21:45:00.184ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3122026-07-02T21:45:00.185ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3132026-07-02T21:45:00.189ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName("oxide-services") } result = Ok(())
3142026-07-02T21:45:00.189ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3152026-07-02T21:45:00.189ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3162026-07-02T21:45:00.220ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 402c102e-99cd-4043-b008-aa12f2be806b roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3172026-07-02T21:45:00.220ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 402c102e-99cd-4043-b008-aa12f2be806b resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3182026-07-02T21:45:00.222ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 402c102e-99cd-4043-b008-aa12f2be806b roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3192026-07-02T21:45:00.223ZDEBGnexus (dropshot_lockstep): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 402c102e-99cd-4043-b008-aa12f2be806b resource = Fleet result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3202026-07-02T21:45:00.223ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 402c102e-99cd-4043-b008-aa12f2be806b roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3212026-07-02T21:45:00.224ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 402c102e-99cd-4043-b008-aa12f2be806b resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3222026-07-02T21:45:00.231ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 402c102e-99cd-4043-b008-aa12f2be806b roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3232026-07-02T21:45:00.231ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 402c102e-99cd-4043-b008-aa12f2be806b resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3242026-07-02T21:45:00.248ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3252026-07-02T21:45:00.249ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3262026-07-02T21:45:00.251ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3272026-07-02T21:45:00.252ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3282026-07-02T21:45:00.305ZINFOnexus (dropshot_lockstep): request completed error_message_external = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" error_message_internal = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:862 latency_us = 85220 local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 402c102e-99cd-4043-b008-aa12f2be806b response_code = 404 uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete
3292026-07-02T21:45:00.306ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3302026-07-02T21:45:00.306ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3312026-07-02T21:45:00.308ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3322026-07-02T21:45:00.313ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName("oxide-services") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) } result = Ok(())
3332026-07-02T21:45:00.313ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3342026-07-02T21:45:00.313ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3352026-07-02T21:45:00.402ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3362026-07-02T21:45:00.403ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3372026-07-02T21:45:00.404ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3382026-07-02T21:45:00.405ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3392026-07-02T21:45:00.406ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3402026-07-02T21:45:00.407ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3412026-07-02T21:45:00.408ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3422026-07-02T21:45:00.413ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName("oxide-services") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) } result = Ok(())
3432026-07-02T21:45:00.413ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3442026-07-02T21:45:00.413ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3452026-07-02T21:45:00.452ZINFOnexus (dropshot_internal): accepted connection file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:1057 local_addr = [fd00:1122:3344:101::b]:12221 remote_addr = [fd00:1122:3344:101::1]:34302
3462026-07-02T21:45:00.453ZDEBGnexus (dropshot_internal): determined request API version local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::1]:34302 req_id = 1278dae6-ec4c-4e56-bf56-c836215745eb uri = /metrics/producers version = 1.0.0
3472026-07-02T21:45:00.453ZDEBGnexus (dropshot_internal): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::1]:34302 req_id = 1278dae6-ec4c-4e56-bf56-c836215745eb roles = RoleSet { roles: {} } type = user_builtin uri = /metrics/producers user_builtin_id = 001de000-05e4-4000-8000-000000000002
3482026-07-02T21:45:00.453ZDEBGnexus (dropshot_internal): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::1]:34302 req_id = 1278dae6-ec4c-4e56-bf56-c836215745eb resource = Database result = Ok(()) type = user_builtin uri = /metrics/producers user_builtin_id = 001de000-05e4-4000-8000-000000000002
3492026-07-02T21:45:00.495ZDEBGnexus (DataLoader): attempting to create built-in VPC firewall rules
3502026-07-02T21:45:00.495ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3512026-07-02T21:45:00.495ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3522026-07-02T21:45:00.505ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3532026-07-02T21:45:00.505ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3542026-07-02T21:45:00.511ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3552026-07-02T21:45:00.512ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3562026-07-02T21:45:00.514ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3572026-07-02T21:45:00.514ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3582026-07-02T21:45:00.516ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3592026-07-02T21:45:00.516ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3602026-07-02T21:45:00.550ZINFOnexus: assigned collector to new producer collector_id = 84093dc6-9d7e-44c3-ac89-48bb7e36e692 file = nexus/src/app/oximeter.rs:76 producer_id = ac06f868-4ecc-416d-bbee-2817087987a8
3612026-07-02T21:45:00.550ZINFOnexus (dropshot_internal): request completed file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:874 latency_us = 97519 local_addr = [fd00:1122:3344:101::b]:12221 method = POST remote_addr = [fd00:1122:3344:101::1]:34302 req_id = 1278dae6-ec4c-4e56-bf56-c836215745eb response_code = 201 uri = /metrics/producers
3622026-07-02T21:45:00.562ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = cfd521db-4969-4589-9730-9293b3a29b93 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3632026-07-02T21:45:00.563ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = cfd521db-4969-4589-9730-9293b3a29b93 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3642026-07-02T21:45:00.564ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = cfd521db-4969-4589-9730-9293b3a29b93 roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3652026-07-02T21:45:00.566ZDEBGnexus (dropshot_lockstep): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = cfd521db-4969-4589-9730-9293b3a29b93 resource = Fleet result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3662026-07-02T21:45:00.566ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = cfd521db-4969-4589-9730-9293b3a29b93 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3672026-07-02T21:45:00.567ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = cfd521db-4969-4589-9730-9293b3a29b93 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3682026-07-02T21:45:00.577ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3692026-07-02T21:45:00.577ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3702026-07-02T21:45:00.579ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3712026-07-02T21:45:00.584ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) } result = Ok(())
3722026-07-02T21:45:00.584ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3732026-07-02T21:45:00.584ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3742026-07-02T21:45:00.587ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = cfd521db-4969-4589-9730-9293b3a29b93 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3752026-07-02T21:45:00.588ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = cfd521db-4969-4589-9730-9293b3a29b93 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
3762026-07-02T21:45:00.589ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3772026-07-02T21:45:00.590ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3782026-07-02T21:45:00.593ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3792026-07-02T21:45:00.593ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3802026-07-02T21:45:00.595ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3812026-07-02T21:45:00.602ZDEBGnexus (DataLoader): authorize result action = Read actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) } result = Ok(())
3822026-07-02T21:45:00.602ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3832026-07-02T21:45:00.602ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3842026-07-02T21:45:00.616ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3852026-07-02T21:45:00.616ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3862026-07-02T21:45:00.619ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3872026-07-02T21:45:00.619ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3882026-07-02T21:45:00.624ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3892026-07-02T21:45:00.624ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3902026-07-02T21:45:00.625ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3912026-07-02T21:45:00.630ZDEBGnexus (DataLoader): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) } result = Ok(())
3922026-07-02T21:45:00.630ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3932026-07-02T21:45:00.630ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3942026-07-02T21:45:00.738ZINFOnexus (DataLoader): created built-in VPC firewall rules file = nexus/db-queries/src/db/datastore/vpc.rs:291
3952026-07-02T21:45:00.738ZDEBGnexus (DataLoader): attempting to create built-in VPC Subnets
3962026-07-02T21:45:00.738ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3972026-07-02T21:45:00.738ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
3982026-07-02T21:45:00.746ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
3992026-07-02T21:45:00.747ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4002026-07-02T21:45:00.749ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4012026-07-02T21:45:00.749ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4022026-07-02T21:45:00.757ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4032026-07-02T21:45:00.758ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4042026-07-02T21:45:00.759ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4052026-07-02T21:45:00.760ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4062026-07-02T21:45:00.761ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4072026-07-02T21:45:00.762ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4082026-07-02T21:45:00.764ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4092026-07-02T21:45:00.768ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) } result = Ok(())
4102026-07-02T21:45:00.768ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4112026-07-02T21:45:00.768ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4122026-07-02T21:45:00.778ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4132026-07-02T21:45:00.779ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4142026-07-02T21:45:00.780ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4152026-07-02T21:45:00.781ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4162026-07-02T21:45:00.782ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4172026-07-02T21:45:00.782ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4182026-07-02T21:45:00.784ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4192026-07-02T21:45:00.788ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) } result = Ok(())
4202026-07-02T21:45:00.791ZINFOnexus (dropshot_lockstep): request completed error_message_external = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" error_message_internal = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:862 latency_us = 229791 local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = cfd521db-4969-4589-9730-9293b3a29b93 response_code = 404 uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete
4212026-07-02T21:45:00.814ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4222026-07-02T21:45:00.814ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4232026-07-02T21:45:00.816ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4242026-07-02T21:45:00.817ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4252026-07-02T21:45:00.880ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4262026-07-02T21:45:00.881ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4272026-07-02T21:45:00.882ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4282026-07-02T21:45:00.887ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName("oxide-services") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) } result = Ok(())
4292026-07-02T21:45:00.887ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4302026-07-02T21:45:00.888ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4312026-07-02T21:45:00.961ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4322026-07-02T21:45:00.962ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4332026-07-02T21:45:00.964ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4342026-07-02T21:45:00.965ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4352026-07-02T21:45:00.975ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4362026-07-02T21:45:00.975ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4372026-07-02T21:45:00.980ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4382026-07-02T21:45:00.981ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4392026-07-02T21:45:00.999ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4402026-07-02T21:45:00.999ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4412026-07-02T21:45:01.001ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4422026-07-02T21:45:01.002ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4432026-07-02T21:45:01.004ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4442026-07-02T21:45:01.004ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4452026-07-02T21:45:01.006ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4462026-07-02T21:45:01.013ZDEBGnexus (DataLoader): authorize result action = Read actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = VpcSubnet { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) }, key: 001de000-c470-4000-8000-000000000002, lookup_type: ById(001de000-c470-4000-8000-000000000002) } result = Ok(())
4472026-07-02T21:45:01.013ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4482026-07-02T21:45:01.013ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4492026-07-02T21:45:01.023ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4502026-07-02T21:45:01.023ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4512026-07-02T21:45:01.024ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4522026-07-02T21:45:01.024ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4532026-07-02T21:45:01.026ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4542026-07-02T21:45:01.027ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4552026-07-02T21:45:01.028ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4562026-07-02T21:45:01.033ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ById(001de000-074c-4000-8000-000000000000) } result = Ok(())
4572026-07-02T21:45:01.045ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4582026-07-02T21:45:01.045ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4592026-07-02T21:45:01.047ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4602026-07-02T21:45:01.048ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4612026-07-02T21:45:01.049ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4622026-07-02T21:45:01.049ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4632026-07-02T21:45:01.051ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4642026-07-02T21:45:01.055ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = VpcRouter { parent: Vpc { parent: Project { parent: Silo { parent: Fleet, key: 001de000-5110-4000-8000-000000000001, lookup_type: ById(001de000-5110-4000-8000-000000000001) }, key: 001de000-4401-4000-8000-000000000000, lookup_type: ById(001de000-4401-4000-8000-000000000000) }, key: 001de000-074c-4000-8000-000000000000, lookup_type: ByName("oxide-services") }, key: 001de000-074c-4000-8000-000000000001, lookup_type: ById(001de000-074c-4000-8000-000000000001) } result = Ok(())
4652026-07-02T21:45:01.055ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4662026-07-02T21:45:01.056ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4672026-07-02T21:45:01.066ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 44d90887-bd23-49b0-8218-f8d9d3576034 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
4682026-07-02T21:45:01.066ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 44d90887-bd23-49b0-8218-f8d9d3576034 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
4692026-07-02T21:45:01.068ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 44d90887-bd23-49b0-8218-f8d9d3576034 roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
4702026-07-02T21:45:01.070ZDEBGnexus (dropshot_lockstep): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 44d90887-bd23-49b0-8218-f8d9d3576034 resource = Fleet result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
4712026-07-02T21:45:01.070ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 44d90887-bd23-49b0-8218-f8d9d3576034 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
4722026-07-02T21:45:01.070ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 44d90887-bd23-49b0-8218-f8d9d3576034 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
4732026-07-02T21:45:01.073ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 44d90887-bd23-49b0-8218-f8d9d3576034 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
4742026-07-02T21:45:01.073ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 44d90887-bd23-49b0-8218-f8d9d3576034 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
4752026-07-02T21:45:01.075ZINFOnexus (dropshot_lockstep): request completed error_message_external = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" error_message_internal = not found: rack with id "760041b0-346a-4e2d-b462-53850ab36ff3" file = /home/build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dropshot-0.17.1/src/server.rs:862 latency_us = 9565 local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 44d90887-bd23-49b0-8218-f8d9d3576034 response_code = 404 uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete
4762026-07-02T21:45:01.154ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4772026-07-02T21:45:01.154ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4782026-07-02T21:45:01.158ZINFOnexus (DataLoader): created built-in services vpc subnets file = nexus/db-queries/src/db/datastore/vpc.rs:357
4792026-07-02T21:45:01.158ZINFOnexus (DataLoader): created built-in services vpc file = nexus/db-queries/src/db/datastore/vpc.rs:233
4802026-07-02T21:45:01.158ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4812026-07-02T21:45:01.159ZDEBGnexus (DataLoader): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4822026-07-02T21:45:01.159ZDEBGnexus (DataLoader): attempting to create silo users
4832026-07-02T21:45:01.159ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4842026-07-02T21:45:01.159ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4852026-07-02T21:45:01.226ZINFOnexus (DataLoader): created 0 silo users file = nexus/db-queries/src/db/datastore/silo_user.rs:938
4862026-07-02T21:45:01.226ZDEBGnexus (DataLoader): attempting to create silo user role assignments
4872026-07-02T21:45:01.226ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4882026-07-02T21:45:01.226ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4892026-07-02T21:45:01.229ZINFOnexus (DataLoader): created 0 silo user role assignments file = nexus/db-queries/src/db/datastore/silo_user.rs:965
4902026-07-02T21:45:01.229ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4912026-07-02T21:45:01.229ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4922026-07-02T21:45:01.232ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4932026-07-02T21:45:01.232ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4942026-07-02T21:45:01.241ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4952026-07-02T21:45:01.242ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
4962026-07-02T21:45:01.244ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4972026-07-02T21:45:01.245ZDEBGnexus (DataLoader): authorize result action = CreateChild actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = IpPoolList result = Ok(())
4982026-07-02T21:45:01.245ZDEBGnexus (DataLoader): roles roles = RoleSet { roles: {} }
4992026-07-02T21:45:01.246ZDEBGnexus (DataLoader): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000001 (built_in_user), .. }) resource = Database result = Ok(())
5002026-07-02T21:45:01.248ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5012026-07-02T21:45:01.249ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5022026-07-02T21:45:01.251ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5032026-07-02T21:45:01.253ZDEBGnexus (dropshot_lockstep): authorize result action = Modify actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 resource = Fleet result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5042026-07-02T21:45:01.253ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5052026-07-02T21:45:01.253ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5062026-07-02T21:45:01.255ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5072026-07-02T21:45:01.256ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5082026-07-02T21:45:01.257ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5092026-07-02T21:45:01.258ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5102026-07-02T21:45:01.260ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 roles = RoleSet { roles: {(Fleet, 001de000-1334-4000-8000-000000000000, "admin")} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5112026-07-02T21:45:01.263ZDEBGnexus (dropshot_lockstep): authorize result action = Read actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 resource = Rack { parent: Fleet, key: 760041b0-346a-4e2d-b462-53850ab36ff3 (rack), lookup_type: ById(760041b0-346a-4e2d-b462-53850ab36ff3) } result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5122026-07-02T21:45:01.263ZDEBGnexus (dropshot_lockstep): updating rack subnet for rack 760041b0-346a-4e2d-b462-53850ab36ff3 to Some( V6( Ipv6Network { addr: fd00:1122:3344:100::, prefix: 56, }, ), ) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5132026-07-02T21:45:01.263ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5142026-07-02T21:45:01.263ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5152026-07-02T21:45:01.267ZINFOnexus (dropshot_lockstep): Recording Rack Network Configuration authenticated = true file = nexus/src/app/rack.rs:305 local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5162026-07-02T21:45:01.267ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5172026-07-02T21:45:01.268ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5182026-07-02T21:45:01.347ZDEBGnexus (dropshot_lockstep): roles authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 roles = RoleSet { roles: {} } type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002
5192026-07-02T21:45:01.347ZDEBGnexus (dropshot_lockstep): authorize result action = Query actor = Some(Actor::UserBuiltin { user_builtin_id: 001de000-05e4-4000-8000-000000000002 (built_in_user), .. }) authenticated = true local_addr = [fd00:1122:3344:101::b]:12232 method = PUT remote_addr = [fd00:1122:3344:101::1]:35056 req_id = 0a7b5faf-6758-4f40-8b8d-f76fbbdd4515 resource = Database result = Ok(()) type = user_builtin uri = /racks/760041b0-346a-4e2d-b462-53850ab36ff3/initialization-complete user_builtin_id = 001de000-05e4-4000-8000-000000000002