Add disallowed-labels tenant option

To allow a tenant to use any labels *except* some pattern, add the
disallowed-labels tenant option.  Both this and the allowed-labels
option use re2, and therefore lookahead assertions are not supported.
A complimentary option to allowed-labels is the only way to support
this use case.

Change-Id: Ic722b1d2b0b609ec7de583dab159094159f00630
This commit is contained in:
James E. Blair
2020-02-04 13:46:49 -08:00
parent fbc0bbd314
commit 61e5c3a0f9
8 changed files with 103 additions and 22 deletions

View File

@@ -0,0 +1,6 @@
---
features:
- |
A new tenant option :attr:`tenant.disallowed-labels`
(similar to :attr:`tenant.allowed-labels`)
can be used to restrict what labels a tenant has access to.