Audit log for authorization decisions #9043

Assert.That(entries[0].Message, Does.Contain("allow")) Expected: String containing "allow" But was: "Allow: subjectId=alice-sub-001 subjectName=alice permission=error:messages:view resource=(null) reason=role matched"

Decision_deny_emits_one_entry_on_audit_category: /_/src/ServiceControl.Infrastructure.Tests/Auth/AuthorizationAuditLogTests.cs#L44

Assert.That(entries[0].Message, Does.Contain("deny")) Expected: String containing "deny" But was: "Deny: subjectId=bob-sub-002 subjectName=Bob Jones permission=error:messages:retry resource=(null) reason=no matching role"

Decision_allow_emits_one_entry_on_audit_category: /_/src/ServiceControl.Infrastructure.Tests/Auth/AuthorizationAuditLogTests.cs#L26

Assert.That(entries[0].Message, Does.Contain("allow")) Expected: String containing "allow" But was: "Allow: subjectId=alice-sub-001 subjectName=Alice Smith permission=error:messages:retry resource=acme.sales reason=role:reader matched"

Windows-Default

Process completed with exit code 1.

Windows-Default

Exit code = 1

Multiple_decisions_accumulate_in_order: /_/src/ServiceControl.Infrastructure.Tests/Auth/AuthorizationAuditLogTests.cs#L72

Decision_deny_emits_one_entry_on_audit_category: /_/src/ServiceControl.Infrastructure.Tests/Auth/AuthorizationAuditLogTests.cs#L44

Decision_allow_emits_one_entry_on_audit_category: /_/src/ServiceControl.Infrastructure.Tests/Auth/AuthorizationAuditLogTests.cs#L26

Linux-AzureStorageQueues

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: Particular/setup-azurestorage-action@v2.0.0. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=*** environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=***. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

container-test / asq

Linux-PostgreSQL

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: Particular/setup-postgres-action@v1.1.0. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=*** environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=***. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Windows-PostgreSQL

Windows-AzureStorageQueues

Linux-RabbitMQ

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: Particular/setup-rabbitmq-action@v1.7.1. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=*** environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=***. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Windows-RabbitMQ

Windows-SQS