Unclear if this is a configuration error or a documentation error.
The OpenAPI spec at https://api-docs.toolforge.org/openapi.json gives https://api.svc.toolforge.org/ as the API root. I am unable to auth to this endpoint:
tools.anomiebot@tools-bastion-12:~$ curl -k --cert ~/.toolskube/client.crt --key ~/.toolskube/client.key "https://api.svc.toolforge.org/jobs/v1/tool/anomiebot/jobs" <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.21.0</center> </body> </html>
The https://wikitech.wikimedia.org/wiki/Help:Toolforge/API#Authentication example gives https://api.svc.tools.eqiad1.wikimedia.cloud:30003 as the root. I am able to authenticate to this endpoint:
tools.anomiebot@tools-bastion-12:~$ curl -k --cert ~/.toolskube/client.crt --key ~/.toolskube/client.key "https://api.svc.tools.eqiad1.wikimedia.cloud:30003/jobs/v1/tool/anomiebot/jobs" {"jobs":[...],"messages":{}}