[01:53:00] I'll prolly file a task later but in case this is E PEBKAC: [01:53:06] >  Error: Unable to delete proxy: stream-beta.wmflabs.org [01:53:25] In horizon for deployment-prep where I'm an admin. [01:53:38] Any idea why this might be? [01:55:45] how did you get there? i.e. why are trying to delete it? [01:56:07] happy to try in case it somehow makes a difference being a different user. (but maybe not for 40 mins til I'm settled in, not traveling) [05:54:00] Krinkle you've got mail. and I got distracted plenty along the way. [05:56:31] I'm in horizon on the web proxy page. There's a bunch of rows, each with a red button next to it. Clicking it results in a spinner and then a pink bubble notification in the top right corner with the above error message. [05:57:21] It's not a big deal, just cleaning up. I'd rather do it myself and/or understand the issue. (RE: offer to do it for me). [05:58:04] ah. ok. I just thought it was another troubleshooting step not so you didn't have to. [05:58:07] Feel free to try though. You can always note down the name/zone/destination and recreate it after. [05:58:18] Yeah makes sense [09:40:33] !log tools added arch arm64 to jessie-tools repo (T398016) [09:40:37] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [09:40:38] T398016: [lima-kilo,misctools] no arm64 version for mac-os based installations - https://phabricator.wikimedia.org/T398016 [09:55:24] !log tools adding arch arm64 to all toolforge repos (T398016) [09:55:28] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [09:55:28] T398016: [lima-kilo,misctools] no arm64 version for mac-os based installations - https://phabricator.wikimedia.org/T398016 [10:48:36] Krinkle: excellent question. in the API logs it just says the request returned a 403, but with no extra detail. and it let me delete it. let me know if that happens again and I'll look more closely to it. [10:54:21] nevermind, spotted the issue [10:57:49] https://gerrit.wikimedia.org/r/c/operations/puppet/+/1167575 [13:11:55] taavi: That patch looks right but I don't think I understand the cause of the original issue. Do we want to allow users to delete deprecated proxies even if they weren't allowed to delete un-deprecated ones? Or am I missing something? [13:12:36] andrewbogott: that doesn't affect the 'proxy:delete' permission check in the route handler at all? [13:14:42] oooh I see, it was previously disallowing interaction with deprecated proxies specifically. [13:14:47] OK, I think I'm caught up now :)