Skip to content

feat(docs): Add namespaced policy option to configuration docs#3303

Merged
elizabethhealy merged 2 commits intomainfrom
document-namespaced-policy-flag
Apr 14, 2026
Merged

feat(docs): Add namespaced policy option to configuration docs#3303
elizabethhealy merged 2 commits intomainfrom
document-namespaced-policy-flag

Conversation

@elizabethhealy
Copy link
Copy Markdown
Member

@elizabethhealy elizabethhealy commented Apr 14, 2026

Proposed Changes

  • document namespaced policy feature flag

Checklist

  • I have added or updated unit tests
  • I have added or updated integration tests (if appropriate)
  • I have added or updated documentation

Testing Instructions

Summary by CodeRabbit

  • Documentation
    • Added documentation for the new namespaced_policy configuration option, which enables namespace requirements for newly created actions, subject mappings, subject condition sets, and registered resources. Non-namespaced variants are now marked as deprecated.

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 14, 2026

Warning

Rate limit exceeded

@elizabethhealy has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 46 minutes and 41 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 46 minutes and 41 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 17d635de-402c-46e6-af24-0ab4869d1f29

📥 Commits

Reviewing files that changed from the base of the PR and between 0ee955f and de1c524.

📒 Files selected for processing (1)
  • docs/Configuring.md
📝 Walkthrough

Walkthrough

Added documentation for the new services.policy.namespaced_policy configuration option that enables namespace requirements for policy-related resources. The policy configuration example was updated to include this option with a default value of false, while marking non-namespaced variants as deprecated.

Changes

Cohort / File(s) Summary
Documentation Updates
docs/Configuring.md
Added documentation for the new services.policy.namespaced_policy configuration option (env var OPENTDF_SERVICES_POLICY_NAMESPACED_POLICY) with default value false. Describes the option as enabling namespace requirements for newly created actions, subject mappings, subject condition sets, and registered resources.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 A carrot of config, so cleanly penned,
Documentation blooming, from start to end,
Namespaced policies dance in the light,
With deprecations marked, the path is now right!

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately reflects the main change: documenting a new namespaced policy configuration option in the docs.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch document-namespaced-policy-flag

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@elizabethhealy elizabethhealy marked this pull request as ready for review April 14, 2026 17:32
@elizabethhealy elizabethhealy requested a review from a team as a code owner April 14, 2026 17:32
@github-actions github-actions bot added the docs Documentation label Apr 14, 2026
@gemini-code-assist
Copy link
Copy Markdown
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request updates the project documentation to include information regarding the namespaced policy feature flag. It clarifies the purpose of this setting and provides an updated configuration example to assist users in implementing this change.

Highlights

  • Documentation Update: Added the namespaced_policy configuration option to the documentation.
  • Configuration Example: Updated the configuration example snippet to include the new namespaced_policy flag.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.


The docs were thin and lacked the word, / Of namespaces that were preferred. / A line was added, clear and bright, / To guide the user through the night.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@docs/Configuring.md`:
- Line 543: Clarify the behavior when `namespaced_policy` is false: explicitly
state that with `namespaced_policy` = false the system treats namespace fields
as legacy/un-namespaced (not enforced), that NULL `namespace_id` is
intentionally valid legacy behavior, and that namespaces will only become
required/enforced once the `NamespacedPolicy` feature is enabled; update the
`namespaced_policy` table entry (referencing `namespaced_policy`,
`NamespacedPolicy`, and `namespace_id`) to include this note so rollout
expectations are unambiguous.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 4f189f8f-fd21-4752-8636-a502762574cf

📥 Commits

Reviewing files that changed from the base of the PR and between 7fae2d7 and 0ee955f.

📒 Files selected for processing (1)
  • docs/Configuring.md

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the documentation in docs/Configuring.md to include a new configuration option, namespaced_policy, under the policy service settings. This option, which defaults to false, mandates namespaces for new actions, subject mappings, subject condition sets, and registered resources when enabled. I have no feedback to provide.

@github-actions
Copy link
Copy Markdown
Contributor

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 206.657423ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 107.25915ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 396.494377ms
Throughput 252.21 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 42.486463464s
Average Latency 423.343638ms
Throughput 117.68 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 206.107221ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 93.737251ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 404.995864ms
Throughput 246.92 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 40.96587316s
Average Latency 407.632935ms
Throughput 122.05 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

  • examples
  • sdk
  • service
  • lib/fixtures
  • tests-bdd

See the workflow run for details.

@elizabethhealy elizabethhealy added this pull request to the merge queue Apr 14, 2026
Merged via the queue into main with commit 63aac72 Apr 14, 2026
38 checks passed
@elizabethhealy elizabethhealy deleted the document-namespaced-policy-flag branch April 14, 2026 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docs Documentation size/xs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants