.golangci.yaml

run:
  timeout: 5m
  skip-dirs:
  - pkg/clientset
  - pkg/apis
  - config
  build-tags:
  - integration_tests
  - e2e_tests
  - conformance_tests
  - istio_tests
  - envtest
linters:
  enable:
  - asasalint
  - asciicheck
  - bodyclose
  - contextcheck
  - depguard
  - dogsled
  - durationcheck
  - errcheck
  - errorlint
  - exhaustive
  - exportloopref
  - gci
  - godot
  - gofmt
  - gofumpt
  - goimports
  - gomodguard
  - gosec
  - gosimple
  - govet
  - importas
  - ineffassign
  - loggercheck
  - megacheck
  - misspell
  - nakedret
  - nilerr
  - nolintlint
  - predeclared
  - revive
  - staticcheck
  - tenv
  - typecheck
  - unconvert
  - unparam
  - unused
  - wastedassign
linters-settings:
  gci:
    sections:
    - standard
    - default
    - prefix(github.com/kong/kubernetes-ingress-controller/v2)
  importas:
    no-unaliased: true
    alias:
    - pkg: k8s.io/api/core/v1
      alias: corev1
    - pkg: k8s.io/api/apps/v1
      alias: appsv1
    - pkg: k8s.io/api/admission/v1
      alias: admissionv1
    - pkg: k8s.io/api/networking/v1
      alias: netv1
    - pkg: k8s.io/api/networking/v1beta1
      alias: netv1beta1

    - pkg: k8s.io/apimachinery/pkg/api/errors
      alias: apierrors
    - pkg: k8s.io/apimachinery/pkg/apis/meta/v1
      alias: metav1
    - pkg: sigs.k8s.io/gateway-api/apis/(v[\w\d]+)
      alias: gateway${1}
  gomodguard:
    blocked:
      modules:
      - github.com/ghodss/yaml:
          recommendations:
          - sigs.k8s.io/yaml
      - gopkg.in/yaml.v2:
          recommendations:
          - sigs.k8s.io/yaml
      - gopkg.in/yaml.v3:
          recommendations:
          - sigs.k8s.io/yaml
      - github.com/pkg/errors:
          recommendations:
          - fmt
          - errors
  depguard:
    list-type: denylist
    include-go-root: false
    packages-with-error-message:
      - k8s.io/utils/pointer: "Use github.com/samber/lo ToPtr instead"
      - golang.org/x/net/context: "use regular context instead"
  tenv:
    all: true
  loggercheck:
    kitlog: false
    klog: true
    logr: true
    zap: false
issues:
  fix: true
  max-same-issues: 0
  exclude-rules:
  # Ignore insecure TLS in tests and hardcoded credentials
  - path: _test\.go
    linters:
      - gosec
    text: "TLS InsecureSkipVerify set true|Potential hardcoded credentials"
  # It's fine to use variable urls in tests.
  - linters:
      - gosec
    text: "Potential HTTP request made with variable url"
    path: test\.go