.golangci.yml

version: "2"
run:
  go: "1.24"
  tests: false
  allow-parallel-runners: true
linters:
  default: none
  enable:
    - goconst
    - gosec
    - govet
    - importas
    - ineffassign
    - misspell
    - nakedret
    - prealloc
    - revive
    - unconvert
    - whitespace
    - staticcheck
  settings:
    gosec:
      excludes:
        - G115 # https://github.com/moby/moby/issues/48358#issuecomment-2323339603
    importas:
      alias:
        - pkg: k8s.io/api/core/v1
          alias: corev1
        - pkg: k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1
          alias: apiextensionsv1
        - pkg: k8s.io/apimachinery/pkg/apis/meta/v1
          alias: metav1
        - pkg: k8s.io/apimachinery/pkg/util/runtime
          alias: utilruntime
        - pkg: sigs.k8s.io/controller-runtime/pkg/client
          alias: runtimeclient
        - pkg: github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2
          alias: ciliumv2
      no-unaliased: true
    revive:
      rules:
        - name: blank-imports
        - name: context-as-argument
        - name: context-keys-type
        - name: dot-imports
        - name: error-return
        - name: error-strings
        - name: error-naming
        - name: exported
        - name: increment-decrement
        - name: var-naming
        - name: var-declaration
        - name: package-comments
        - name: range
        - name: receiver-naming
        - name: time-naming
        - name: indent-error-flow
        - name: errorf
        - name: empty-block
        - name: superfluous-else
        - name: unused-parameter
        - name: unreachable-code
        - name: redefines-builtin-id
        - name: unexported-return
    misspell:
      locale: US
      ignore-rules: []
      extra-words: []
      mode: default
    staticcheck:
      dot-import-whitelist:
        - fmt
      initialisms: ["ACL", "API", "ASCII", "CPU", "CSS", "DNS", "EOF", "GUID", "HTML", "HTTP", "HTTPS", "ID", "IP", "JSON", "QPS", "RAM", "RPC", "SLA", "SMTP", "SQL", "SSH", "TCP", "TLS", "TTL", "UDP", "UI", "GID", "UID", "UUID", "URI", "URL", "UTF8", "VM", "XML", "XMPP", "XSRF", "XSS", "SIP", "RTP", "AMQP", "DB", "TS"]
      http-status-code-whitelist: ["200", "400", "404", "500"]
      checks:
        - all
  exclusions:
    generated: lax
    presets:
      - comments
      - common-false-positives
      - legacy
      - std-error-handling
    rules:
      # Permit package names
      - linters:
          - revive
        text: 'avoid meaningless package names'
      # Permit insecure skip tls verify
      - linters:
          - gosec
        path: pkg/*
        text: TLS InsecureSkipVerify may be true
      # Permit codegen generated CRD file permission
      - linters:
          - gosec
        path: pkg/codegen/*
        text: Expect WriteFile permissions to be 0600 or less
      # Permit codegen unused function
      - linters:
          - unused
        path: pkg/codegen/*
        text: 'is unused'
      # Permit codegen using deprecated K8s API
      - linters:
          - staticcheck
        path: pkg/codegen/*
        text: This API is deprecated
      # Permit profiling endpoint
      - linters:
          - gosec
        path: main.go
        text: Profiling endpoint is automatically exposed on
      # Permit profiling server no support for timeouts
      - linters:
          - gosec
        path: main.go
        text: serve function that has no support for setting timeouts
    paths:
      - zz_generated_*
      - third_party$
      - builtin$
      - examples$
formatters:
  enable:
    - gofmt
    - goimports
  exclusions:
    generated: lax
    paths:
      - zz_generated_*
      - third_party$
      - builtin$
      - examples$