Skip to content

systemslab infra deny

Description Deny an instance request that has not yet reached `launching`.
Usage systemslab infra deny [OPTIONS] --reason <REASON> <REQUEST_ID>

Description

The systemslab infra deny command moves an instance_request that is currently pending or awaiting_approval to denied. If the request was bound to queued work, denying it also fails that run and stops its experiment.

Find deniable requests with systemslab infra requests --state pending --state awaiting_approval.

Idempotent. Denying a request that has already moved past this point — already launching, already terminal, or not a request id this deployment recognizes at all — prints nothing-to-do (in --output-format short) or a "nothing to deny" message (in the default long format) rather than either a success or an error. The server cannot tell "already resolved" apart from "no such request", so this command reports the same outcome for both; check with systemslab infra requests beforehand if you need to know which case you hit.

A note on --actor and identity

This deployment has no authentication layer. The actor recorded on a denial — by default operator:<your OS username>, derived automatically — is a courtesy label for the machine log, not a verified identity: anyone able to run this command can pass any --actor value they like. Use a real name via --actor when the automatic default would not identify you (for example, running under a shared or service account).

Examples

sh
systemslab infra deny 01900000-0d00-7f00-8000-000000000002 --reason "no capacity"

Options

OptionDefaultDescription
<REQUEST_ID> The instance request to deny. Find request ids with systemslab infra requests.
--reason Why this request is being denied. Recorded on the request row and in the machine log, so a later reader of systemslab infra requests or systemslab infra log can see why it was turned down. Required.
--actoroperator:<current OS user> The actor recorded on this denial, overriding the derived default. Recorded verbatim as the actor on the resulting machine-log entry. Caller-asserted, not authenticated — see the note above.

Common Options

OptionDefaultDescription
--systemslab-url The URL at which to access the systemslab server.
--colorauto Controls when color is used in the output. Possible values are auto, always, and never.
--output-formatlong Output format to use when outputting messages. long will result output designed to be human-readable while short is short output meant to be used within scripts.

Environment Variables

VariableDescription
SYSTEMSLAB_URLSpecify the URL used to contact the SystemsLab server. Equivalent to --systemslab-url.