init ci.yaml (#14)

* init ci.yaml

.github/workflows/ci.yaml

@@ -0,0 +1,149 @@
+# Reference from:
+# https://github.com/c-bata/go-prompt/blob/master/.github/workflows/test.yml
+name: Check
+on:
+  pull_request:
+    branches:
+    - main
+    - release-*
+  push:
+    branches:
+    - main
+    - release-*
+
+env:
+  GO_VERSION: '1.19'
+
+jobs:
+
+  Test:
+    name: Unit Test
+    runs-on: ubuntu-20.04
+    steps:
+    - uses: actions/checkout@v3
+      with:
+        submodules: true
+    - name: Fetch History
+      run: git fetch --prune --unshallow
+    - name: Setup Go
+      uses: actions/setup-go@v3
+      with:
+        go-version: ${{ env.GO_VERSION }}
+    - name: Cache Go Dependencies
+      uses: actions/cache@v2
+      with:
+        path: ~/go/pkg/mod
+        key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+        restore-keys: ${{ runner.os }}-go-
+    - name: Run Unit Tests
+      run: |
+        make test
+        git status
+    # TODO: enable after public
+    #    - name: Publish Unit Test Coverage
+    #      uses: codecov/codecov-action@v3
+    #      with:
+    #        flags: unittests
+    #        file: cover.out
+    - name: Check diff
+      run: '[[ -z $(git status -s) ]] || (printf "Existing modified/untracked files.\nPlease run \"make generate manifests fmt vet\" and push again.\n"; exit 1)'
+
+  GolangLint:
+    name: Golang Lint
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v3
+      with:
+        fetch-depth: 0
+    - name: Set up Go
+      uses: actions/setup-go@v4
+      with:
+        go-version: ${{ env.GO_VERSION }}
+        cache: false
+    - name: golangci-lint
+      uses: golangci/golangci-lint-action@v3
+      with:
+        # Optional: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version
+        version: v1.53
+        args: --timeout=30m
+
+  # Lints Pull Request commits with commitlint.
+  #
+  # Rules can be referenced:
+  # https://github.com/conventional-changelog/commitlint/tree/master/%40commitlint/config-conventional
+  #  CommitLint:
+  #    name: Commit Lint
+  #    runs-on: ubuntu-latest
+  #    if: contains(fromJSON('["pull_request"]'), github.event_name)
+  #    steps:
+  #      - name: Checkout
+  #        uses: actions/checkout@v3
+  #        with:
+  #          fetch-depth: 0
+  #      - uses: wagoid/commitlint-github-action@v5
+
+  # Lints Pull Request title, because the title will be used as the
+  # commit message in branch main.
+  #
+  # Configuration detail can be referenced:
+  # https://github.com/marketplace/actions/pull-request-title-rules
+
+  #  PullRequestTitleLint:
+  #    name: Pull Request Title Lint
+  #    runs-on: ubuntu-latest
+  #    if: contains(fromJSON('["pull_request"]'), github.event_name)
+  #    steps:
+  #      - uses: deepakputhraya/action-pr-title@master
+  #        with:
+  #          allowed_prefixes: 'build,chore,ci,docs,feat,fix,perf,refactor,revert,style,test' # title should start with the given prefix
+  #          disallowed_prefixes: 'WIP,[WIP]' # title should not start with the given prefix
+  #          prefix_case_sensitive: false # title prefix are case insensitive
+  #          min_length: 5 # Min length of the title
+  #          max_length: 80 # Max length of the title
+  #          github_token: ${{ github.token }} # Default: ${{ github.token }}
+
+  LicenseCheck:
+    name: License Check
+    runs-on: ubuntu-latest
+    env:
+      TERM: xterm
+    steps:
+    - uses: actions/checkout@v3
+      with:
+        fetch-depth: 0
+    - uses: apache/skywalking-eyes@main
+
+  # The TruffleHog OSS Github Action can be used to scan a range of commits for leaked credentials. The action will fail if any results are found.
+  # More see: https://github.com/marketplace/actions/trufflehog-oss
+  SecretScan:
+    name: Secret Scan
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v3
+      with:
+        fetch-depth: 0
+    - name: TruffleHog OSS
+      uses: trufflesecurity/trufflehog@main
+      with:
+        path: ./
+        base: ${{ github.event.repository.default_branch }}
+        head: HEAD
+        extra_args: --debug --json
+
+  # TODO: Uncomment when the repository is publicly.
+  # DependencyReview:
+  #   permissions:
+  #     actions: read
+  #     contents: read
+  #     security-events: write
+  #   name: Dependency Review
+  #   runs-on: ubuntu-latest
+  #   steps:
+  #     - uses: actions/checkout@v3
+  #       with:
+  #         fetch-depth: 0
+  #     - uses: actions/dependency-review-action@v3
+  #       with:
+  #         fail-on-severity: critical

.golangci.yaml

@@ -0,0 +1,10 @@
+run:
+  skip-files:
+  - ".*_test.go"
+  skip-dirs:
+  - vendor/
+
+linters:
+  disable:
+  - errcheck
+  - unused

.licenserc.yaml

@@ -0,0 +1,64 @@
+header:
+  license:
+    content: |
+      Licensed under the Apache License, Version 2.0 (the "License");
+      you may not use this file except in compliance with the License.
+      You may obtain a copy of the License at
+      
+      http://www.apache.org/licenses/LICENSE-2.0
+      
+      Unless required by applicable law or agreed to in writing, software
+      distributed under the License is distributed on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+      See the License for the specific language governing permissions and
+      limitations under the License.
+  paths:
+    - '**'
+  paths-ignore:
+    - '**/*.conf'
+    - '**/*.DS_Store'
+    - '**/*.json'
+    - '**/*.lock'
+    - '**/*.Dockerfile'
+    - '**/*.sh'
+    - '**/*.yaml'
+    - '**/*.md'
+    - '**/*.mk'
+    - '**/*.svg'
+    - '**/*.txt'
+    - '**/*.xlf'
+    - '**/.husky/**'
+    - '**/node_modules/**'
+    - '**/.babelrc'
+    - '**/.browserslistrc'
+    - '**/.editorconfig'
+    - '**/.jsbeautifyrc'
+    - '**/.yarnrc.yml'
+    - '**/config_repos'
+    - '**/go.mod'
+    - '**/go.sum'
+    - '**/go.work'
+    - '**/go.work.sum'
+    - '**/lcov.info'
+    - '**/Makefile'
+    - '**/OWNERS'
+    - '.github/**'
+    - '.idea/**'
+    - '.vscode/**'
+    - '.dist/**'
+    - '.husky/**'
+    - 'hack/**'
+    - 'LICENSE'
+    - 'OWNERS_ALIASES'
+    - 'SECURITY_CONTACTS'
+    - 'vendor/**'
+    - '.gitignore'
+    - '.licenserc'
+    - '**/zz_generated.deepcopy.go'
+    - '**/*.pb.go'
+    - '**/*.proto'
+    - '**/PROJECT'
+    - '**/Dockerfile'
+    - '**/.dockerignore'
+  comment: never
+  license-location-threshold: 80

pkg/webhook/server/generic/generic_mutating_handler.go

@@ -43,7 +43,6 @@ func (h *MutatingHandler) Handle(ctx context.Context, req admission.Request) (re
 	}
 	if handler, exist := MutatingTypeHandlerMap[key]; exist {
 		return handler.Handle(ctx, req, h.Client, h.Decoder)
-	} else {
 	}
 
 	// do nothing

test/e2e/framework/test_context.go

@@ -20,7 +20,6 @@ package framework
 import (
 	"flag"
 	"fmt"
-	"io/ioutil"
 	"os"
 	"time"
 
@@ -350,7 +349,7 @@ func AfterReadingAllFlags(t *TestContextType) {
 	if len(t.Host) == 0 && len(t.KubeConfig) == 0 {
 		// Check if we can use the in-cluster config
 		if clusterConfig, err := restclient.InClusterConfig(); err == nil {
-			if tempFile, err := ioutil.TempFile(os.TempDir(), "kubeconfig-"); err == nil {
+			if tempFile, err := os.CreateTemp(os.TempDir(), "kubeconfig-"); err == nil {
 				kubeConfig := createKubeConfig(clusterConfig)
 				clientcmd.WriteToFile(*kubeConfig, tempFile.Name())
 				t.KubeConfig = tempFile.Name()

test/e2e/framework/testfiles/testfiles.go

@@ -21,7 +21,6 @@ import (
 	"errors"
 	"fmt"
 	"io/fs"
-	"io/ioutil"
 	"os"
 	"path"
 	"path/filepath"
@@ -114,7 +113,7 @@ func (r RootFileSource) ReadTestFile(filePath string) ([]byte, error) {
 	} else {
 		fullPath = filepath.Join(r.Root, filePath)
 	}
-	data, err := ioutil.ReadFile(fullPath)
+	data, err := os.ReadFile(fullPath)
 	if os.IsNotExist(err) {
 		// Not an error (yet), some other provider may have the file.
 		return nil, nil

test/e2e/framework/util.go

@@ -24,7 +24,6 @@ import (
 	"io"
 	"math/rand"
 	"net"
-	"net/url"
 	"os/exec"
 	"path/filepath"
 	"sort"
@@ -912,10 +911,6 @@ func isTimeout(err error) bool {
 		if err.Timeout() {
 			return true
 		}
-	case *url.Error:
-		if err, ok := err.Err.(net.Error); ok && err.Timeout() {
-			return true
-		}
 	}
 	return false
 }