Create an API Call to Manage Blacklisted Domains

This blueprint proposes to provide an admin-only API call to dynamically manage blacklisted zones.

Currently, the list of blacklisted zones resides in the .config file. Designate must be restarted before any changes to the .config file take place. One possible solution to this could be to make the .config file reloadable without restarting the Designate service. However, there are only limited Operations personnel who have access to the .config file, and while blacklisted zones are not normally added or changed very often, when it is needed, it needs to be done quickly. Providing an API call would allow support personnel to be given admin rights to this API call so that they can effectively make the change in a timely manner, without trying to find the one or two people who can change the .config file.

Regular expressions are still used to give the admins greater control over whether or not a subdomain is also blacklisted.