Skip to content

feat(rulesfile): add ConfigMap as rules source#220

Merged
poiana merged 4 commits intofalcosecurity:mainfrom
c2ndev:feat/rulesfile-configmap-support
Feb 6, 2026
Merged

feat(rulesfile): add ConfigMap as rules source#220
poiana merged 4 commits intofalcosecurity:mainfrom
c2ndev:feat/rulesfile-configmap-support

Conversation

@c2ndev
Copy link
Contributor

@c2ndev c2ndev commented Jan 29, 2026

What type of PR is this?

Uncomment one (or more) /kind <> lines:

/kind bug

/kind cleanup

/kind design

/kind documentation

/kind failing-test

/kind feature

Any specific area of the project related to this PR?

Uncomment one (or more) /area <> lines:

/area falco-operator

/area artifact-operator

/area pkg

/area api

/area docs

What this PR does / why we need it:

Adds ConfigMap as a new source for Rulesfile artifacts, alongside OCI registries and inline YAML. This allows users to manage Falco rules declaratively within the cluster using ConfigMaps.

The artifact manager has been refactored with dependency injection for improved testability, achieving ~90% unit test coverage. The OCI puller is now stateless to prevent race conditions during concurrent reconciliations.

Which issue(s) this PR fixes:

Fixes #219

Special notes for your reviewer:

  • ConfigMap watch is filtered to the operator's namespace to reduce overhead

@poiana poiana requested review from alacuku and leogr January 29, 2026 16:47
@c2ndev c2ndev changed the title feat(rulesfile): add ConfigMap as rules source wip: feat(rulesfile): add ConfigMap as rules source Jan 29, 2026
@c2ndev c2ndev force-pushed the feat/rulesfile-configmap-support branch 6 times, most recently from 1da9d5c to fa7d354 Compare February 2, 2026 13:58
@c2ndev c2ndev force-pushed the feat/rulesfile-configmap-support branch 2 times, most recently from 4a641f3 to 8e3dae3 Compare February 4, 2026 11:27
@leogr leogr changed the title wip: feat(rulesfile): add ConfigMap as rules source feat(rulesfile): add ConfigMap as rules source Feb 4, 2026
@c2ndev c2ndev requested a review from alacuku February 4, 2026 11:31
@c2ndev c2ndev force-pushed the feat/rulesfile-configmap-support branch from 8e3dae3 to 576df58 Compare February 4, 2026 13:19
Signed-off-by: cannarelladev <cannarella.dev@gmail.com>
Signed-off-by: cannarelladev <cannarella.dev@gmail.com>
Signed-off-by: cannarelladev <cannarella.dev@gmail.com>
…tifact constants and types

Signed-off-by: cannarelladev <cannarella.dev@gmail.com>
Copy link
Member

@alacuku alacuku left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@poiana
Copy link

poiana commented Feb 6, 2026

LGTM label has been added.

DetailsGit tree hash: 2e9bf9ada5514193dd711e1af78c00c03e1ba6ab

@poiana
Copy link

poiana commented Feb 6, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: alacuku, c2ndev

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@poiana poiana added the approved label Feb 6, 2026
@poiana poiana merged commit 6936c53 into falcosecurity:main Feb 6, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: Support ConfigMap as source for Rulesfile artifacts

3 participants