BUILD/MEDIUM: go: increase Go version to 1.23

Author: oktalz

.gitlab-ci.yml

@@ -11,8 +11,8 @@ variables:
   KIND: v0.21.0
   DOCKER_HOST: tcp://docker:2375
   DOCKER_DRIVER: overlay2
-  GO_VERSION: "1.22"
-  DOCKER_VERSION: "24.0.6"
+  GO_VERSION: "1.23"
+  DOCKER_VERSION: "26.0"
 diff:
   stage: diff
   rules:
@@ -105,7 +105,7 @@ unit-tests:
     - if: $CI_PIPELINE_SOURCE == 'push'
   stage: unit-tests
   image:
-    name: $CI_REGISTRY_GO/haproxy-alpine:2.7-go$GO_VERSION
+    name: $CI_REGISTRY_GO/haproxy-alpine:3.0-go$GO_VERSION
     entrypoint: [""]
   tags:
     - go

.golangci.yml

@@ -1,12 +1,10 @@
 linters-settings:
   govet:
-    check-shadowing: true
+    shadow: true
   gocyclo:
     min-complexity: 42
   cyclop:
     max-complexity: 42
-  maligned:
-    suggest-new: true
   dupl:
     threshold: 200
   revive:
@@ -20,15 +18,13 @@ linters:
     - ireturn
     - dupl
     - exhaustive
-    - exhaustivestruct
     - funlen
     - gci
     - gochecknoglobals
     - gocognit
     - goconst
     - gocyclo
     - godot
-    - goerr113
     - gomnd
     - lll
     - nestif
@@ -39,19 +35,19 @@ linters:
     - paralleltest
     - testpackage
     - varnamelen
-    - nosnakecase
     - exhaustruct
     - nonamedreturns
     - forcetypeassert
-    - golint #deprecated
-    - varcheck #deprecated
-    - ifshort #deprecated
-    - structcheck #deprecated
-    - maligned #deprecated
-    - scopelint #deprecated
-    - interfacer #deprecated
-    - deadcode #deprecated
     - depguard
+    - mnd
+    - inamedparam
+    - err113 # maybe tmp disable
+    - asasalint
+    - exportloopref # deprecated
+    - execinquery # deprecated
+    - tagliatelle
+    - testifylint
+    - typecheck
 issues:
   exclude:
     - "tag is not aligned, should be:" # this is harder to read

Makefile

@@ -2,7 +2,7 @@ PROJECT_PATH=${PWD}
 TARGETPLATFORM?=linux/amd64
 GOOS?=linux
 GOARCH?=amd64
-GOLANGCI_LINT_VERSION=1.54.2
+GOLANGCI_LINT_VERSION=1.61.0
 
 .PHONY: test
 test:

build/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.22-alpine AS builder
+FROM golang:1.23-alpine AS builder
 
 RUN apk --no-cache add git openssh
 

build/Dockerfile.pebble

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.22-alpine AS builder
+FROM golang:1.23-alpine AS builder
 
 RUN apk --no-cache add git openssh
 

deploy/tests/e2e/utils.go

@@ -131,7 +131,7 @@ func (t *Test) GetK8sVersion() (major, minor int, err error) {
 	if err != nil {
 		return 0, 0, err
 	}
-	config, err := clientcmd.BuildConfigFromFlags("", fmt.Sprintf("%s/.kube/config", home))
+	config, err := clientcmd.BuildConfigFromFlags("", home+"/.kube/config")
 	if err != nil {
 		return 0, 0, err
 	}

deploy/tests/images/http-echo/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.22-alpine AS builder
+FROM golang:1.23-alpine AS builder
 
 COPY *.go /src/
 COPY go.mod /src/go.mod

deploy/tests/images/http-echo/go.mod

@@ -1,3 +1,3 @@
 module echo-http
 
-go 1.22
+go 1.23

go.mod

@@ -1,6 +1,6 @@
 module github.com/haproxytech/kubernetes-ingress
 
-go 1.22.0
+go 1.23
 
 require (
 	github.com/Masterminds/semver/v3 v3.2.1

pkg/annotations/service/checkHTTP.go

@@ -1,7 +1,7 @@
 package service
 
 import (
-	"fmt"
+	"errors"
 	"strings"
 
 	"github.com/haproxytech/client-native/v5/models"
@@ -34,7 +34,7 @@ func (a *CheckHTTP) Process(k store.K8s, annotations ...map[string]string) error
 	checkHTTPParams := strings.Fields(strings.TrimSpace(input))
 	switch len(checkHTTPParams) {
 	case 0:
-		return fmt.Errorf("httpchk option: incorrect number of params")
+		return errors.New("httpchk option: incorrect number of params")
 	case 1:
 		params = &models.HttpchkParams{
 			URI: checkHTTPParams[0],

pkg/annotations/service/loadbalance.go

@@ -1,6 +1,7 @@
 package service
 
 import (
+	"errors"
 	"fmt"
 	"regexp"
 	"strconv"
@@ -49,7 +50,7 @@ func getParamsFromInput(value string) (*models.Balance, error) {
 	balance := &models.Balance{}
 	tokens := strings.Split(value, " ")
 	if len(tokens) == 0 {
-		return nil, fmt.Errorf("missing algorithm name")
+		return nil, errors.New("missing algorithm name")
 	}
 
 	reg := regexp.MustCompile(`(\(|\))`)

pkg/gateways/gateways.go

@@ -549,7 +549,7 @@ func (gm GatewayManagerImpl) isTCPRouteAllowedByListener(listener store.Listener
 		return routeNamespace != gatewayNamespace
 	}
 
-	gkAllowed := listener.AllowedRoutes.Kinds == nil || len(listener.AllowedRoutes.Kinds) == 0
+	gkAllowed := len(listener.AllowedRoutes.Kinds) == 0
 	for _, kind := range listener.AllowedRoutes.Kinds {
 		if (kind.Group != nil && *kind.Group != v1alpha2.GroupName) || kind.Kind != K8S_TCPROUTE_KIND {
 			continue

pkg/gateways/updates.go

@@ -175,7 +175,6 @@ func (statusMgr *StatusManagerImpl) UpdateStatusTCPRoutes(routesStatusRecords []
 		}
 
 		for _, parentStatusRecord := range tcprouteStatusRecord.parentsStatusesRecords {
-			parentStatusRecord := parentStatusRecord
 			conditions := []metav1.Condition{}
 			routeParentStatus := v1alpha2.RouteParentStatus{
 				ControllerName: v1alpha2.GatewayController(statusMgr.gatewayControllerName),

pkg/handler/https.go

@@ -225,7 +225,7 @@ func (handler HTTPS) enableSSLPassthrough(h haproxy.HAProxy) (err error) {
 		}),
 		h.BackendSwitchingRuleCreate(h.FrontSSL, models.BackendSwitchingRule{
 			Index: utils.PtrInt64(0),
-			Name:  fmt.Sprintf("%%[var(txn.sni_match),field(1,.)]"),
+			Name:  fmt.Sprintf("%%[var(txn.sni_match),field(1,.)]"), //nolint:perfsprint
 		}),
 		handler.toggleSSLPassthrough(true, h))
 	return errors.Result()

pkg/handler/tcp-services.go

@@ -40,7 +40,7 @@ func (handler TCPServices) Update(k store.K8s, h haproxy.HAProxy, a annotations.
 		if port == "log-format-tcp" {
 			continue
 		}
-		frontendName := fmt.Sprintf("tcp-%s", port)
+		frontendName := "tcp-" + port
 		p, err = handler.parseTCPService(k, tcpSvcAnn)
 		if err != nil {
 			logger.Error(err)

pkg/haproxy/api/backend.go

@@ -1,7 +1,7 @@
 package api
 
 import (
-	"fmt"
+	"errors"
 
 	"github.com/haproxytech/client-native/v5/models"
 	"github.com/haproxytech/config-parser/v5/types"
@@ -197,7 +197,7 @@ func (c *clientNative) BackendSwitchingRuleDeleteAll(frontend string) (err error
 	if err != nil {
 		return
 	}
-	for i := 0; i < len(switchingRules); i++ {
+	for range switchingRules {
 		if err = configuration.DeleteBackendSwitchingRule(0, frontend, c.activeTransaction, 0); err != nil {
 			break
 		}
@@ -232,7 +232,7 @@ func (c *clientNative) BackendServersGet(backendName string) (models.Servers, er
 func (c *clientNative) RefreshBackends() (deleted []string, err error) {
 	backends, errAPI := c.BackendsGet()
 	if errAPI != nil {
-		err = fmt.Errorf("unable to get configured backends")
+		err = errors.New("unable to get configured backends")
 		return
 	}
 	for _, backend := range backends {

pkg/haproxy/api/runtime.go

@@ -13,7 +13,7 @@ import (
 	"github.com/haproxytech/kubernetes-ingress/pkg/utils"
 )
 
-var ErrMapNotFound = fmt.Errorf("map not found")
+var ErrMapNotFound = errors.New("map not found")
 
 type RuntimeServerData struct {
 	BackendName string
@@ -98,7 +98,7 @@ func (c *clientNative) runRaw(runtime runtime.Runtime, sb strings.Builder, backe
 	if err != nil {
 		return err
 	}
-	for i := 0; i < len(result); i++ {
+	for i := range result {
 		if len(result[i]) > 5 {
 			switch result[i][1:5] {
 			case "[3]:", "[2]:", "[1]:", "[0]:":
@@ -130,7 +130,7 @@ func (c *clientNative) SetMapContent(mapFile string, payload []string) error {
 		err = fmt.Errorf("error getting map path: %w", err)
 		return err
 	}
-	for i := 0; i < len(payload); i++ {
+	for i := range payload {
 		_, err = runtime.ExecuteRaw(fmt.Sprintf("add map @%s %s <<\n%s\n", mapVer, mapPath, payload[i]))
 		if err != nil {
 			err = fmt.Errorf("error loading map payload: %w", err)

pkg/haproxy/certs/main.go

@@ -70,13 +70,13 @@ type SecretCtx struct {
 func New(envParam Env) (Certificates, error) { //nolint:ireturn
 	env = envParam
 	if env.FrontendDir == "" {
-		return nil, fmt.Errorf("empty name for Frontend Cert Directory")
+		return nil, errors.New("empty name for Frontend Cert Directory")
 	}
 	if env.BackendDir == "" {
-		return nil, fmt.Errorf("empty name for Backend Cert Directory")
+		return nil, errors.New("empty name for Backend Cert Directory")
 	}
 	if env.CaDir == "" {
-		return nil, fmt.Errorf("empty name for CA Cert Directory")
+		return nil, errors.New("empty name for CA Cert Directory")
 	}
 	return &certs{
 		frontend: make(map[string]*cert),
@@ -211,15 +211,15 @@ func writeSecret(secret *store.Secret, c *cert, privateKeyNull bool) (err error)
 		if !crtOk {
 			return fmt.Errorf("certificate missing in %s/%s", secret.Namespace, secret.Name)
 		}
-		c.path = fmt.Sprintf("%s.pem", c.path)
+		c.path += ".pem"
 		return writeCert(c.path, []byte(""), crtValue)
 	}
 	for _, k := range []string{"tls", "rsa", "ecdsa", "dsa"} {
 		keyValue, keyOk = secret.Data[k+".key"]
 		crtValue, crtOk = secret.Data[k+".crt"]
 		if keyOk && crtOk {
 			pemOk = true
-			certPath = fmt.Sprintf("%s.pem", c.path)
+			certPath = c.path + ".pem"
 			if k != "tls" {
 				// HAProxy "cert bundle"
 				certPath = fmt.Sprintf("%s.%s", certPath, k)

pkg/haproxy/env/main.go

@@ -15,6 +15,7 @@
 package env
 
 import (
+	"errors"
 	"fmt"
 	"os"
 	"path/filepath"
@@ -62,7 +63,7 @@ func (env *Env) Init(osArgs utils.OSArgs) (err error) {
 	}
 	for _, dir := range []string{env.CfgDir, env.RuntimeDir, env.StateDir} {
 		if dir == "" {
-			return fmt.Errorf("failed to init controller config: missing config directories")
+			return errors.New("failed to init controller config: missing config directories")
 		}
 	}
 	// Binary and main files

pkg/haproxy/maps/main.go

@@ -16,7 +16,6 @@ package maps
 
 import (
 	"errors"
-	"fmt"
 	"hash/fnv"
 	"os"
 	"path"
@@ -82,7 +81,7 @@ func (mf *mapFile) getContent() (result []string, hash uint64) {
 
 func New(dir string, persistentMaps []Name) (Maps, error) { //nolint:ireturn
 	if dir == "" {
-		return nil, fmt.Errorf("empty name for map directory")
+		return nil, errors.New("empty name for map directory")
 	}
 	mapDir = dir
 	var maps mapFiles = make(map[Name]*mapFile, len(persistentMaps))

pkg/haproxy/process/direct-control.go

@@ -29,7 +29,7 @@ func (d *directControl) Service(action string) (err error) {
 	// hold information about a running Master HAproxy process
 	process, processErr := haproxyProcess(d.Env.PIDFile)
 
-	masterSocketArg := fmt.Sprintf("%s,level,admin", d.Env.MasterSocket)
+	masterSocketArg := d.Env.MasterSocket + ",level,admin"
 
 	//nolint:gosec //checks on HAProxyBinary should be done in configuration module.
 	switch action {

pkg/haproxy/rules/main.go

@@ -2,6 +2,7 @@ package rules
 
 import (
 	"encoding/json"
+	"errors"
 	"fmt"
 
 	"github.com/haproxytech/client-native/v5/models"
@@ -73,7 +74,7 @@ func (rules *List) Add(rule Rule) {
 
 func (r SectionRules) AddRule(frontend string, rule Rule, ingressRule bool) error {
 	if rule == nil || frontend == "" {
-		return fmt.Errorf("invalid params")
+		return errors.New("invalid params")
 	}
 	// Create frontend ruleSet
 	ftRuleSet, ok := r[frontend]

pkg/haproxy/rules/reqAcceptContent.go

@@ -1,7 +1,7 @@
 package rules
 
 import (
-	"fmt"
+	"errors"
 
 	"github.com/haproxytech/client-native/v5/models"
 
@@ -17,7 +17,7 @@ func (r ReqAcceptContent) GetType() Type {
 
 func (r ReqAcceptContent) Create(client api.HAProxyClient, frontend *models.Frontend, ingressACL string) error {
 	if frontend.Mode == "http" {
-		return fmt.Errorf("tcp accept-content rule is only available in TCP frontends")
+		return errors.New("tcp accept-content rule is only available in TCP frontends")
 	}
 	tcpRule := models.TCPRequestRule{
 		Index:    utils.PtrInt64(0),

pkg/haproxy/rules/reqInspectDelay.go

@@ -1,7 +1,7 @@
 package rules
 
 import (
-	"fmt"
+	"errors"
 
 	"github.com/haproxytech/client-native/v5/models"
 
@@ -19,7 +19,7 @@ func (r ReqInspectDelay) GetType() Type {
 
 func (r ReqInspectDelay) Create(client api.HAProxyClient, frontend *models.Frontend, ingressACL string) error {
 	if frontend.Mode == "http" {
-		return fmt.Errorf("tcp inspect-delay rule is only available in TCP frontends")
+		return errors.New("tcp inspect-delay rule is only available in TCP frontends")
 	}
 	tcpRule := models.TCPRequestRule{
 		Type:    "inspect-delay",