Merge pull request #1 from nginx/nginxaas-merge-devops

Merge in changes made by NGINXaaS for Azure project

Author: arussellf5

.gitignore

@@ -23,4 +23,69 @@ cover*
 tmp/
 docs/tls/DESIGN.md
 :q
-qqq
+qqq.env
+.env*
+!.env.example
+!.allowed_clients.json
+!.env.example.auth
+*.db
+priv/certs
+priv/nginx-agent/*
+!priv/nginx-agent/nginx-agent.conf.example
+key-data.json
+nginx-instance-manager.tar.gz
+vendor/
+
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# Output from debugger
+__debug_bin
+
+code-quality.json
+coverage/*
+
+# vim
+*~
+*.swp
+
+### VisualStudioCode (from https://gitignore.io/api/VisualStudioCode) ###
+.vscode/*
+!.vscode/tasks.example.json
+!.vscode/launch.example.json
+!.vscode/extensions.json
+!.vscode/KubernetesLocalProcessConfig*.yaml
+*.code-workspace
+
+### Goland
+.idea/*
+
+# bridge to kubernetes artifact
+/KubernetesLocalProcessConfig.yaml
+
+
+# output directory for build artifacts
+build
+
+# output directory for test artifacts (eg. coverage report, junit xml)
+results
+
+# devops-utils repo
+.devops-utils/
+
+# Ignore golang cache in CI
+.go/pkg/mod
+
+.go-build
+
+nginxaas-loadbalancer-kubernetes-*

.golangci.yml

@@ -0,0 +1,92 @@
+# GolangCI-Lint settings
+
+# Disable all linters and enable the required ones
+linters:
+  disable-all: true
+
+  # Supported linters: https://golangci-lint.run/usage/linters/
+  enable:
+    - errcheck
+    - gosimple
+    - govet
+    - ineffassign
+    - staticcheck
+    - typecheck
+    - unused
+    - bodyclose
+    - dupl
+    - gochecknoinits
+    - goconst
+    - gocritic
+    - gocyclo
+    - gofmt
+    - goimports
+    - gosec
+    - lll
+    - misspell
+    - nakedret
+    - prealloc
+    - stylecheck
+    - unconvert
+    - unparam
+    - paralleltest
+    - forbidigo
+  fast: false
+
+# Run options
+run:
+  # 10 minute timeout for analysis
+  timeout: 10m
+# Specific linter settings
+linters-settings:
+  gocyclo:
+    # Minimal code complexity to report
+    min-complexity: 16
+  govet:
+    disable-all: true
+    enable:
+      # Report shadowed variables
+      - shadow
+
+  misspell:
+    # Correct spellings using locale preferences for US
+    locale: US
+  goimports:
+    # Put imports beginning with prefix after 3rd-party packages
+    local-prefixes: gitswarm.f5net.com/indigo,gitlab.com/f5
+  exhaustruct:
+    # List of regular expressions to match struct packages and names.
+    # If this list is empty, all structs are tested.
+    # Default: []
+    include:
+      - "gitlab.com/f5/nginx/nginxazurelb/azure-resource-provider/pkg/token.TokenID"
+      - "gitlab.com/f5/nginx/nginxazurelb/azure-resource-provider/internal/dpo/agent/certificates.CertGetRequest"
+
+issues:
+  exclude-dirs:
+    - .go/pkg/mod
+  # Exclude configuration
+  exclude-rules:
+    # Exclude gochecknoinits and gosec from running on tests files
+    - path: _test\.go
+      linters:
+        - gochecknoinits
+        - gosec
+    - path: test/*
+      linters:
+        - gochecknoinits
+        - gosec
+    # Exclude lll issues for long lines with go:generate
+    - linters:
+        - lll
+      source: "^//go:generate "
+    # Exclude false positive paralleltest error : Range statement for test case does not use range value in test Run
+    - linters:
+        - paralleltest
+      text: "does not use range value in test Run"
+
+  # Disable maximum issues count per one linter
+  max-issues-per-linter: 0
+
+  # Disable maximum count of issues with the same text
+  max-same-issues: 0

.tool-versions

@@ -1 +1 @@
-golang 1.23.3
+golang 1.24.4

Dockerfile

@@ -1,27 +1,11 @@
-# Copyright 2023 f5 Inc. All rights reserved.
-# Use of this source code is governed by the Apache
-# license that can be found in the LICENSE file.
+FROM alpine:3.14.1 AS base-certs
+RUN apk update && apk add --no-cache ca-certificates
 
-FROM golang:1.23.3-alpine3.20 AS builder
+FROM scratch AS base
+COPY docker-user /etc/passwd
+USER 101
+COPY --from=base-certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 
-WORKDIR /app
-
-COPY go.mod go.sum ./
-
-RUN go mod download
-
-COPY . .
-
-RUN go build -o nginx-loadbalancer-kubernetes ./cmd/nginx-loadbalancer-kubernetes/main.go
-
-FROM alpine:3.20
-
-WORKDIR /opt/nginx-loadbalancer-kubernetes
-
-RUN adduser -u 11115 -D -H  nlk
-
-USER nlk
-
-COPY --from=builder /app/nginx-loadbalancer-kubernetes .
-
-ENTRYPOINT ["/opt/nginx-loadbalancer-kubernetes/nginx-loadbalancer-kubernetes"]
+FROM base as nginxaas-loadbalancer-kubernetes
+ENTRYPOINT ["/nginxaas-loadbalancer-kubernetes"]
+COPY build/nginxaas-loadbalancer-kubernetes /