The role role::ci::slave::labs::docker is allowed on integration-slave-docker-c2-m4-d40-1005.integration.eqiad.wmflabs and appears on https://tools.wmflabs.org/openstack-browser/server/integration-slave-docker-c2-m4-d40-1005.integration.eqiad.wmflabs but does not appear as applied in horizon and thus can not be removed.
The same also happens for the integration-slave-docker-c2-m4-d40-1004.integration.eqiad.wmflabs instance that I created today, however this is a WIP instance and broken in other ways hence using the 1005 example.