.golangci.yaml

# https://golangci-lint.run/usage/configuration
version: "2"

# https://golangci-lint.run/usage/linters
linters:
  default: standard
  enable:
    - asasalint
    - asciicheck
    - bidichk
    - bodyclose
    - copyloopvar
    - depguard
    - dupword
    - durationcheck
    - errchkjson
    - errname
    - errorlint
    - exhaustive
    - exptostd
    - fatcontext
    - forbidigo
    - ginkgolinter
    - gocheckcompilerdirectives
    - gochecksumtype
    - goheader
    - gomoddirectives
    - gomodguard
    - goprintffuncname
    - gosec
    - gosmopolitan
    - grouper
    - iface
    - importas
    - interfacebloat
    - intrange
    - loggercheck
    - makezero
    - mirror
    - misspell
    - musttag
    - nilerr
    - nilnesserr
    - noctx
    - nolintlint
    - nosprintfhostport
    - prealloc
    - promlinter
    - protogetter
    - reassign
    - recvcheck
    - rowserrcheck
    - sloglint
    - spancheck
    - sqlclosecheck
    - tagalign
    - testifylint
    - unconvert
    - unparam
    - usestdlibvars
    - usetesting
    - wastedassign
    - zerologlint

  settings:
    dupword:
      ignore:
        # We might see duplicate instances of 'fi' if we end two bash 'if' statements
        - fi

    depguard:
      rules:
        everything:
          files: ['$all']
          list-mode: lax
          allow:
            - go.opentelemetry.io/otel/semconv/v1.27.0
          deny:
            - pkg: go.opentelemetry.io/otel/semconv
              desc: Use "go.opentelemetry.io/otel/semconv/v1.27.0" instead.
            - pkg: io/ioutil
              desc: Use the "io" and "os" packages instead. See https://go.dev/doc/go1.16#ioutil
            - pkg: math/rand$
              desc: Use the "math/rand/v2" package instead. See https://go.dev/doc/go1.22#math_rand_v2
        not-tests:
          files: ['!$test','!**/internal/testing/**']
          list-mode: lax
          deny:
            - pkg: net/http/httptest
              desc: Should be used only in tests.
            - pkg: testing/*
              desc: The "testing" packages should be used only in tests.
            - pkg: github.com/crunchydata/postgres-operator/internal/crd/*
              desc: The "internal/crd" packages should be used only in tests.
            - pkg: github.com/crunchydata/postgres-operator/internal/testing/*
              desc: The "internal/testing" packages should be used only in tests.
            - pkg: k8s.io/client-go/discovery
              desc: Use the "internal/kubernetes" package instead.
        tests:
          files: ['$test']
          list-mode: lax
          deny:
            - pkg: github.com/pkg/errors
              desc: Use the "errors" package unless you are interacting with stack traces.

    errchkjson:
      check-error-free-encoding: true

    goheader:
      template: |-
        Copyright {{ DATES }} Crunchy Data Solutions, Inc.

        SPDX-License-Identifier: Apache-2.0
      values:
        regexp:
          DATES: ((201[7-9]|202[0-5]) - 2026|2026)

    gomodguard:
      blocked:
        modules:
          - go.yaml.in/yaml/v2: { recommendations: [sigs.k8s.io/yaml] }
          - go.yaml.in/yaml/v3: { recommendations: [sigs.k8s.io/yaml] }
          - gopkg.in/yaml.v2: { recommendations: [sigs.k8s.io/yaml] }
          - gopkg.in/yaml.v3: { recommendations: [sigs.k8s.io/yaml] }
          - gotest.tools: { recommendations: [gotest.tools/v3] }
          - k8s.io/kubernetes:
              reason: k8s.io/kubernetes is for building kubelet, kubeadm, etc.

    importas:
      no-unaliased: true
      alias:
        - pkg: k8s.io/api/(\w+)/(v[\w\w]+)
          alias: $1$2
        - pkg: k8s.io/apimachinery/pkg/apis/(\w+)/(v[\w\d]+)
          alias: $1$2
        - pkg: k8s.io/apimachinery/pkg/api/errors
          alias: apierrors

    spancheck:
      checks: [end, record-error]
      extra-start-span-signatures:
        - github.com/crunchydata/postgres-operator/internal/tracing.Start:opentelemetry
      ignore-check-signatures:
        - tracing.Escape

  exclusions:
    warn-unused: true
    presets:
      - common-false-positives
      - legacy
      - std-error-handling
    rules:
      # It is fine for tests to use "math/rand" packages.
      - linters: [gosec]
        path: '(.+)_test[.]go'
        text: weak random number generator

      # This internal package is the one place we want to do API discovery.
      - linters: [depguard]
        path: internal/kubernetes/discovery.go
        text: k8s.io/client-go/discovery

      # Postgres HBA rules often include "all all all"
      - linters: [dupword]
        path: /(hba|postgres)[^/]+$
        text: words \(all\) found

      # These value types have unmarshal methods.
      # https://github.com/raeperd/recvcheck/issues/7
      - linters: [recvcheck]
        path: internal/pki/pki.go
        text: methods of "(Certificate|PrivateKey)"

      - linters: [staticcheck]
        text: corev1.(Endpoints|EndpointSubset) is deprecated

      - linters: [staticcheck]
        path: internal/controller/
        text: >-
          deprecated: Use `RequeueAfter` instead

      - linters: [staticcheck]
        path: internal/controller/runtime
        text: >-
          client.Apply is deprecated

      - linters: [staticcheck]
        path: internal/controller/(postgrescluster|pgupgrade|standalone_pgadmin)
        text: >-
           GetEventRecorderFor is deprecated

# https://golangci-lint.run/usage/formatters
formatters:
  enable:
    - gci
    - gofmt
  settings:
    gci:
      sections:
        - standard
        - default
        - localmodule

issues:
  # Fix only when requested
  fix: false

  # Show all issues at once
  max-issues-per-linter: 0
  max-same-issues: 0
  uniq-by-line: false