CLOUDP-302068: Add a linter to forbid env var usage (#1690)

m1kola · web-flow · commit bbc718507c72 · 2025-03-12T19:33:09.000+01:00
We want to avoid spreading the practice of accessing environment
variables deep in the call hierarchy. We only want to access env
vars in the `main` package or very close to it.

This commit adds a linter to help us with that.
It also adds `nolint:forbidigo` exceptions into places:

* Where we allow access (`main` package)
* Where we still unfortunately have access. These places ideally
  need to change with time.

To find remaining undesired places, from repo root you can `grep`
all files for `nolint:forbidigo` excluding files with `main` package.
For example: `grep "nolint:forbidigo" --exclude main.go -r .`
diff --git a/.golangci.yml b/.golangci.yml
@@ -16,6 +16,12 @@ issues:
       - goconst
       - golint
       text: "underscore"
+    - path: ^pkg\/util\/envvar
+      linters:
+        - forbidigo
+    - path: ^cmd\/(readiness|versionhook|manager)\/main\.go$
+      linters:
+        - forbidigo
 linters:
   enable:
     - govet
@@ -28,10 +34,25 @@ linters:
     - rowserrcheck
     - gosec
     - unconvert
+    - forbidigo
 linters-settings:
   gosec:
     excludes:
       - G115
+  forbidigo:
+    forbid:
+      - p: os\.(Getenv|LookupEnv|Environ|ExpandEnv)
+        pkg: os
+        msg: "Reading environemnt variables here is prohibited. Please read environment variables in the main package."
+      - p: os\.(Clearenv|Unsetenv|Setenv)
+        msg: "Modifying environemnt variables is prohibited."
+        pkg: os
+      - p: envvar\.(Read.*?|MergeWithOverride|GetEnvOrDefault)
+        pkg: github.com/mongodb/mongodb-kubernetes-operator/pkg/util/envvar
+        msg: "Using this envvar package here is prohibited. Please work with environment variables in the main package."
+    # Rules with the `pkg` depend on it
+    analyze-types: true
+
 run:
   modules-download-mode: mod
   # timeout for analysis, e.g. 30s, 5m, default is 1m
diff --git a/controllers/construct/build_statefulset_test.go b/controllers/construct/build_statefulset_test.go
@@ -109,7 +109,7 @@ func assertStatefulSetIsBuiltCorrectly(t *testing.T, mdb mdbv1.MongoDBCommunity,
 	assert.Len(t, sts.Spec.Template.Spec.Containers[0].Env, 4)
 	assert.Len(t, sts.Spec.Template.Spec.Containers[1].Env, 1)
 
-	managedSecurityContext := envvar.ReadBool(podtemplatespec.ManagedSecurityContextEnv)
+	managedSecurityContext := envvar.ReadBool(podtemplatespec.ManagedSecurityContextEnv) // nolint:forbidigo
 	if !managedSecurityContext {
 		assert.NotNil(t, sts.Spec.Template.Spec.SecurityContext)
 		assert.Equal(t, podtemplatespec.DefaultPodSecurityContext(), *sts.Spec.Template.Spec.SecurityContext)
diff --git a/controllers/construct/mongodbstatefulset.go b/controllers/construct/mongodbstatefulset.go
@@ -417,7 +417,7 @@ func collectEnvVars() []corev1.EnvVar {
 	})
 
 	addEnvVarIfSet := func(name string) {
-		value := os.Getenv(name)
+		value := os.Getenv(name) // nolint:forbidigo
 		if value != "" {
 			envVars = append(envVars, corev1.EnvVar{
 				Name:  name,
diff --git a/controllers/replica_set_controller.go b/controllers/replica_set_controller.go
@@ -219,7 +219,7 @@ func (r ReplicaSetReconciler) Reconcile(ctx context.Context, request reconcile.R
 	}
 
 	res, err := status.Update(ctx, r.client.Status(), &mdb, statusOptions().
-		withMongoURI(mdb.MongoURI(os.Getenv(clusterDomain))).
+		withMongoURI(mdb.MongoURI(os.Getenv(clusterDomain))). // nolint:forbidigo
 		withMongoDBMembers(mdb.AutomationConfigMembersThisReconciliation()).
 		withStatefulSetReplicas(mdb.StatefulSetReplicasThisReconciliation()).
 		withStatefulSetArbiters(mdb.StatefulSetArbitersThisReconciliation()).
@@ -232,7 +232,7 @@ func (r ReplicaSetReconciler) Reconcile(ctx context.Context, request reconcile.R
 		return res, err
 	}
 
-	if err := r.updateConnectionStringSecrets(ctx, mdb, os.Getenv(clusterDomain)); err != nil {
+	if err := r.updateConnectionStringSecrets(ctx, mdb, os.Getenv(clusterDomain)); err != nil { // nolint:forbidigo
 		r.log.Errorf("Could not update connection string secrets: %s", err)
 	}
 
@@ -515,8 +515,8 @@ func (r ReplicaSetReconciler) ensureAutomationConfig(mdb mdbv1.MongoDBCommunity,
 }
 
 func buildAutomationConfig(mdb mdbv1.MongoDBCommunity, isEnterprise bool, auth automationconfig.Auth, currentAc automationconfig.AutomationConfig, modifications ...automationconfig.Modification) (automationconfig.AutomationConfig, error) {
-	domain := getDomain(mdb.ServiceName(), mdb.Namespace, os.Getenv(clusterDomain))
-	arbiterDomain := getDomain(mdb.ServiceName(), mdb.Namespace, os.Getenv(clusterDomain))
+	domain := getDomain(mdb.ServiceName(), mdb.Namespace, os.Getenv(clusterDomain))        // nolint:forbidigo
+	arbiterDomain := getDomain(mdb.ServiceName(), mdb.Namespace, os.Getenv(clusterDomain)) // nolint:forbidigo
 
 	zap.S().Debugw("AutomationConfigMembersThisReconciliation", "mdb.AutomationConfigMembersThisReconciliation()", mdb.AutomationConfigMembersThisReconciliation())
 
@@ -557,7 +557,7 @@ func buildAutomationConfig(mdb mdbv1.MongoDBCommunity, isEnterprise bool, auth a
 }
 
 func guessEnterprise(mdb mdbv1.MongoDBCommunity, mongodbImage string) bool {
-	overrideAssumption, err := strconv.ParseBool(os.Getenv(construct.MongoDBAssumeEnterpriseEnv))
+	overrideAssumption, err := strconv.ParseBool(os.Getenv(construct.MongoDBAssumeEnterpriseEnv)) // nolint:forbidigo
 	if err == nil {
 		return overrideAssumption
 	}
diff --git a/pkg/kube/container/container_test.go b/pkg/kube/container/container_test.go
@@ -146,7 +146,7 @@ func TestMergeEnvs(t *testing.T) {
 		},
 	}
 
-	merged := envvar.MergeWithOverride(existing, desired)
+	merged := envvar.MergeWithOverride(existing, desired) // nolint:forbidigo
 
 	t.Run("EnvVars should be sorted", func(t *testing.T) {
 		assert.Equal(t, "A_env", merged[0].Name)
diff --git a/pkg/kube/container/containers.go b/pkg/kube/container/containers.go
@@ -129,7 +129,7 @@ func WithLifecycle(lifeCycleMod lifecycle.Modification) Modification {
 // WithEnvs ensures all of the provided envs exist in the container
 func WithEnvs(envs ...corev1.EnvVar) Modification {
 	return func(container *corev1.Container) {
-		container.Env = envvar.MergeWithOverride(container.Env, envs)
+		container.Env = envvar.MergeWithOverride(container.Env, envs) // nolint:forbidigo
 	}
 }
 
diff --git a/pkg/kube/podtemplatespec/podspec_template.go b/pkg/kube/podtemplatespec/podspec_template.go
@@ -297,7 +297,7 @@ func FindContainerByName(name string, podTemplateSpec *corev1.PodTemplateSpec) *
 }
 
 func WithDefaultSecurityContextsModifications() (Modification, container.Modification) {
-	managedSecurityContext := envvar.ReadBool(ManagedSecurityContextEnv)
+	managedSecurityContext := envvar.ReadBool(ManagedSecurityContextEnv) // nolint:forbidigo
 	configureContainerSecurityContext := container.NOOP()
 	configurePodSpecSecurityContext := NOOP()
 	if !managedSecurityContext {
diff --git a/pkg/readiness/config/config.go b/pkg/readiness/config/config.go
@@ -43,15 +43,15 @@ func BuildFromEnvVariables(clientSet kubernetes.Interface, isHeadless bool, file
 	var namespace, automationConfigName, hostname string
 	if isHeadless {
 		var ok bool
-		namespace, ok = os.LookupEnv(podNamespaceEnv)
+		namespace, ok = os.LookupEnv(podNamespaceEnv) // nolint:forbidigo
 		if !ok {
 			return Config{}, fmt.Errorf("the '%s' environment variable must be set", podNamespaceEnv)
 		}
-		automationConfigName, ok = os.LookupEnv(automationConfigSecretEnv)
+		automationConfigName, ok = os.LookupEnv(automationConfigSecretEnv) // nolint:forbidigo
 		if !ok {
 			return Config{}, fmt.Errorf("the '%s' environment variable must be set", automationConfigSecretEnv)
 		}
-		hostname, ok = os.LookupEnv(hostNameEnv)
+		hostname, ok = os.LookupEnv(hostNameEnv) // nolint:forbidigo
 		if !ok {
 			return Config{}, fmt.Errorf("the '%s' environment variable must be set", hostNameEnv)
 		}
@@ -85,7 +85,7 @@ func readinessProbeLogFilePath() string {
 }
 
 func GetEnvOrDefault(envVar, defaultValue string) string {
-	value := strings.TrimSpace(os.Getenv(envVar))
+	value := strings.TrimSpace(os.Getenv(envVar)) // nolint:forbidigo
 	if value == "" {
 		return defaultValue
 	}
diff --git a/test/e2e/e2eutil.go b/test/e2e/e2eutil.go
@@ -36,7 +36,7 @@ func TestAnnotations() map[string]string {
 }
 
 func TestDataDir() string {
-	return envvar.GetEnvOrDefault(testDataDirEnv, "/workspace/testdata")
+	return envvar.GetEnvOrDefault(testDataDirEnv, "/workspace/testdata") // nolint:forbidigo
 }
 
 func TlsTestDataDir() string {
diff --git a/test/e2e/setup/setup.go b/test/e2e/setup/setup.go
@@ -42,7 +42,7 @@ const (
 )
 
 func Setup(ctx context.Context, t *testing.T) *e2eutil.TestContext {
-	testCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv))
+	testCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv)) // nolint:forbidigo
 
 	if err != nil {
 		t.Fatal(err)
@@ -57,7 +57,7 @@ func Setup(ctx context.Context, t *testing.T) *e2eutil.TestContext {
 }
 
 func SetupWithTLS(ctx context.Context, t *testing.T, resourceName string, additionalHelmArgs ...HelmArg) (*e2eutil.TestContext, TestConfig) {
-	textCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv))
+	textCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv)) // nolint:forbidigo
 
 	if err != nil {
 		t.Fatal(err)
@@ -76,7 +76,7 @@ func SetupWithTLS(ctx context.Context, t *testing.T, resourceName string, additi
 }
 
 func SetupWithTestConfig(ctx context.Context, t *testing.T, testConfig TestConfig, withTLS, defaultOperator bool, resourceName string) *e2eutil.TestContext {
-	testCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv))
+	testCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv)) // nolint:forbidigo
 
 	if err != nil {
 		t.Fatal(err)
diff --git a/test/e2e/setup/test_config.go b/test/e2e/setup/test_config.go
@@ -34,18 +34,19 @@ type TestConfig struct {
 
 func LoadTestConfigFromEnv() TestConfig {
 	return TestConfig{
-		Namespace:               envvar.GetEnvOrDefault(testNamespaceEnvName, "mongodb"),
-		CertManagerNamespace:    envvar.GetEnvOrDefault(testCertManagerNamespaceEnvName, "cert-manager"),
-		CertManagerVersion:      envvar.GetEnvOrDefault(testCertManagerVersionEnvName, "v1.5.3"),
-		OperatorImage:           envvar.GetEnvOrDefault(operatorImageEnvName, "quay.io/mongodb/community-operator-dev:latest"),
-		MongoDBImage:            envvar.GetEnvOrDefault(construct.MongodbImageEnv, "mongodb-community-server"),
-		MongoDBRepoUrl:          envvar.GetEnvOrDefault(construct.MongodbRepoUrlEnv, "quay.io/mongodb"),
-		VersionUpgradeHookImage: envvar.GetEnvOrDefault(construct.VersionUpgradeHookImageEnv, "quay.io/mongodb/mongodb-kubernetes-operator-version-upgrade-post-start-hook:1.0.2"),
-		AgentImage:              envvar.GetEnvOrDefault(construct.AgentImageEnv, "quay.io/mongodb/mongodb-agent-ubi:10.29.0.6830-1"), // TODO: better way to decide default agent image.
-		ClusterWide:             envvar.ReadBool(clusterWideEnvName),
-		PerformCleanup:          envvar.ReadBool(performCleanupEnvName),
-		ReadinessProbeImage:     envvar.GetEnvOrDefault(construct.ReadinessProbeImageEnv, "quay.io/mongodb/mongodb-kubernetes-readinessprobe:1.0.3"),
-		HelmChartPath:           envvar.GetEnvOrDefault(helmChartPathEnvName, "/workspace/helm-charts/charts/community-operator"),
-		LocalOperator:           envvar.ReadBool(LocalOperatorEnvName),
+		Namespace:               envvar.GetEnvOrDefault(testNamespaceEnvName, "mongodb"),                                                                                           // nolint:forbidigo
+		CertManagerNamespace:    envvar.GetEnvOrDefault(testCertManagerNamespaceEnvName, "cert-manager"),                                                                           // nolint:forbidigo
+		CertManagerVersion:      envvar.GetEnvOrDefault(testCertManagerVersionEnvName, "v1.5.3"),                                                                                   // nolint:forbidigo
+		OperatorImage:           envvar.GetEnvOrDefault(operatorImageEnvName, "quay.io/mongodb/community-operator-dev:latest"),                                                     // nolint:forbidigo
+		MongoDBImage:            envvar.GetEnvOrDefault(construct.MongodbImageEnv, "mongodb-community-server"),                                                                     // nolint:forbidigo
+		MongoDBRepoUrl:          envvar.GetEnvOrDefault(construct.MongodbRepoUrlEnv, "quay.io/mongodb"),                                                                            // nolint:forbidigo
+		VersionUpgradeHookImage: envvar.GetEnvOrDefault(construct.VersionUpgradeHookImageEnv, "quay.io/mongodb/mongodb-kubernetes-operator-version-upgrade-post-start-hook:1.0.2"), // nolint:forbidigo
+		// TODO: better way to decide default agent image.
+		AgentImage:          envvar.GetEnvOrDefault(construct.AgentImageEnv, "quay.io/mongodb/mongodb-agent-ubi:10.29.0.6830-1"),                 // nolint:forbidigo
+		ClusterWide:         envvar.ReadBool(clusterWideEnvName),                                                                                 // nolint:forbidigo
+		PerformCleanup:      envvar.ReadBool(performCleanupEnvName),                                                                              // nolint:forbidigo
+		ReadinessProbeImage: envvar.GetEnvOrDefault(construct.ReadinessProbeImageEnv, "quay.io/mongodb/mongodb-kubernetes-readinessprobe:1.0.3"), // nolint:forbidigo
+		HelmChartPath:       envvar.GetEnvOrDefault(helmChartPathEnvName, "/workspace/helm-charts/charts/community-operator"),                    // nolint:forbidigo
+		LocalOperator:       envvar.ReadBool(LocalOperatorEnvName),                                                                               // nolint:forbidigo
 	}
 }

Original file line number	Diff line number	Diff line change
`@@ -219,7 +219,7 @@ func (r ReplicaSetReconciler) Reconcile(ctx context.Context, request reconcile.R`
`219`	`219`	`}`
`220`	`220`
`221`	`221`	`res, err := status.Update(ctx, r.client.Status(), &mdb, statusOptions().`
`222`		`- withMongoURI(mdb.MongoURI(os.Getenv(clusterDomain))).`
	`222`	`+ withMongoURI(mdb.MongoURI(os.Getenv(clusterDomain))). // nolint:forbidigo`
`223`	`223`	`withMongoDBMembers(mdb.AutomationConfigMembersThisReconciliation()).`
`224`	`224`	`withStatefulSetReplicas(mdb.StatefulSetReplicasThisReconciliation()).`
`225`	`225`	`withStatefulSetArbiters(mdb.StatefulSetArbitersThisReconciliation()).`
`@@ -232,7 +232,7 @@ func (r ReplicaSetReconciler) Reconcile(ctx context.Context, request reconcile.R`
`232`	`232`	`return res, err`
`233`	`233`	`}`
`234`	`234`
`235`		`- if err := r.updateConnectionStringSecrets(ctx, mdb, os.Getenv(clusterDomain)); err != nil {`
	`235`	`+ if err := r.updateConnectionStringSecrets(ctx, mdb, os.Getenv(clusterDomain)); err != nil { // nolint:forbidigo`
`236`	`236`	`r.log.Errorf("Could not update connection string secrets: %s", err)`
`237`	`237`	`}`
`238`	`238`
`@@ -515,8 +515,8 @@ func (r ReplicaSetReconciler) ensureAutomationConfig(mdb mdbv1.MongoDBCommunity,`
`515`	`515`	`}`
`516`	`516`
`517`	`517`	`func buildAutomationConfig(mdb mdbv1.MongoDBCommunity, isEnterprise bool, auth automationconfig.Auth, currentAc automationconfig.AutomationConfig, modifications ...automationconfig.Modification) (automationconfig.AutomationConfig, error) {`
`518`		`- domain := getDomain(mdb.ServiceName(), mdb.Namespace, os.Getenv(clusterDomain))`
`519`		`- arbiterDomain := getDomain(mdb.ServiceName(), mdb.Namespace, os.Getenv(clusterDomain))`
	`518`	`+ domain := getDomain(mdb.ServiceName(), mdb.Namespace, os.Getenv(clusterDomain)) // nolint:forbidigo`
	`519`	`+ arbiterDomain := getDomain(mdb.ServiceName(), mdb.Namespace, os.Getenv(clusterDomain)) // nolint:forbidigo`
`520`	`520`
`521`	`521`	`zap.S().Debugw("AutomationConfigMembersThisReconciliation", "mdb.AutomationConfigMembersThisReconciliation()", mdb.AutomationConfigMembersThisReconciliation())`
`522`	`522`
`@@ -557,7 +557,7 @@ func buildAutomationConfig(mdb mdbv1.MongoDBCommunity, isEnterprise bool, auth a`
`557`	`557`	`}`
`558`	`558`
`559`	`559`	`func guessEnterprise(mdb mdbv1.MongoDBCommunity, mongodbImage string) bool {`
`560`		`- overrideAssumption, err := strconv.ParseBool(os.Getenv(construct.MongoDBAssumeEnterpriseEnv))`
	`560`	`+ overrideAssumption, err := strconv.ParseBool(os.Getenv(construct.MongoDBAssumeEnterpriseEnv)) // nolint:forbidigo`
`561`	`561`	`if err == nil {`
`562`	`562`	`return overrideAssumption`
`563`	`563`	`}`
Original file line number	Diff line number	Diff line change
`@@ -146,7 +146,7 @@ func TestMergeEnvs(t *testing.T) {`
`146`	`146`	`},`
`147`	`147`	`}`
`148`	`148`
`149`		`- merged := envvar.MergeWithOverride(existing, desired)`
	`149`	`+ merged := envvar.MergeWithOverride(existing, desired) // nolint:forbidigo`
`150`	`150`
`151`	`151`	`t.Run("EnvVars should be sorted", func(t *testing.T) {`
`152`	`152`	`assert.Equal(t, "A_env", merged[0].Name)`
Original file line number	Diff line number	Diff line change
`@@ -129,7 +129,7 @@ func WithLifecycle(lifeCycleMod lifecycle.Modification) Modification {`
`129`	`129`	`// WithEnvs ensures all of the provided envs exist in the container`
`130`	`130`	`func WithEnvs(envs ...corev1.EnvVar) Modification {`
`131`	`131`	`return func(container *corev1.Container) {`
`132`		`- container.Env = envvar.MergeWithOverride(container.Env, envs)`
	`132`	`+ container.Env = envvar.MergeWithOverride(container.Env, envs) // nolint:forbidigo`
`133`	`133`	`}`
`134`	`134`	`}`
`135`	`135`
Original file line number	Diff line number	Diff line change
`@@ -297,7 +297,7 @@ func FindContainerByName(name string, podTemplateSpec corev1.PodTemplateSpec) `
`297`	`297`	`}`
`298`	`298`
`299`	`299`	`func WithDefaultSecurityContextsModifications() (Modification, container.Modification) {`
`300`		`- managedSecurityContext := envvar.ReadBool(ManagedSecurityContextEnv)`
	`300`	`+ managedSecurityContext := envvar.ReadBool(ManagedSecurityContextEnv) // nolint:forbidigo`
`301`	`301`	`configureContainerSecurityContext := container.NOOP()`
`302`	`302`	`configurePodSpecSecurityContext := NOOP()`
`303`	`303`	`if !managedSecurityContext {`
Original file line number	Diff line number	Diff line change
`@@ -43,15 +43,15 @@ func BuildFromEnvVariables(clientSet kubernetes.Interface, isHeadless bool, file`
`43`	`43`	`var namespace, automationConfigName, hostname string`
`44`	`44`	`if isHeadless {`
`45`	`45`	`var ok bool`
`46`		`- namespace, ok = os.LookupEnv(podNamespaceEnv)`
	`46`	`+ namespace, ok = os.LookupEnv(podNamespaceEnv) // nolint:forbidigo`
`47`	`47`	`if !ok {`
`48`	`48`	`return Config{}, fmt.Errorf("the '%s' environment variable must be set", podNamespaceEnv)`
`49`	`49`	`}`
`50`		`- automationConfigName, ok = os.LookupEnv(automationConfigSecretEnv)`
	`50`	`+ automationConfigName, ok = os.LookupEnv(automationConfigSecretEnv) // nolint:forbidigo`
`51`	`51`	`if !ok {`
`52`	`52`	`return Config{}, fmt.Errorf("the '%s' environment variable must be set", automationConfigSecretEnv)`
`53`	`53`	`}`
`54`		`- hostname, ok = os.LookupEnv(hostNameEnv)`
	`54`	`+ hostname, ok = os.LookupEnv(hostNameEnv) // nolint:forbidigo`
`55`	`55`	`if !ok {`
`56`	`56`	`return Config{}, fmt.Errorf("the '%s' environment variable must be set", hostNameEnv)`
`57`	`57`	`}`
`@@ -85,7 +85,7 @@ func readinessProbeLogFilePath() string {`
`85`	`85`	`}`
`86`	`86`
`87`	`87`	`func GetEnvOrDefault(envVar, defaultValue string) string {`
`88`		`- value := strings.TrimSpace(os.Getenv(envVar))`
	`88`	`+ value := strings.TrimSpace(os.Getenv(envVar)) // nolint:forbidigo`
`89`	`89`	`if value == "" {`
`90`	`90`	`return defaultValue`
`91`	`91`	`}`
Original file line number	Diff line number	Diff line change
`@@ -36,7 +36,7 @@ func TestAnnotations() map[string]string {`
`36`	`36`	`}`
`37`	`37`
`38`	`38`	`func TestDataDir() string {`
`39`		`- return envvar.GetEnvOrDefault(testDataDirEnv, "/workspace/testdata")`
	`39`	`+ return envvar.GetEnvOrDefault(testDataDirEnv, "/workspace/testdata") // nolint:forbidigo`
`40`	`40`	`}`
`41`	`41`
`42`	`42`	`func TlsTestDataDir() string {`
Original file line number	Diff line number	Diff line change
`@@ -42,7 +42,7 @@ const (`
`42`	`42`	`)`
`43`	`43`
`44`	`44`	`func Setup(ctx context.Context, t testing.T) e2eutil.TestContext {`
`45`		`- testCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv))`
	`45`	`+ testCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv)) // nolint:forbidigo`
`46`	`46`
`47`	`47`	`if err != nil {`
`48`	`48`	`t.Fatal(err)`
`@@ -57,7 +57,7 @@ func Setup(ctx context.Context, t testing.T) e2eutil.TestContext {`
`57`	`57`	`}`
`58`	`58`
`59`	`59`	`func SetupWithTLS(ctx context.Context, t testing.T, resourceName string, additionalHelmArgs ...HelmArg) (e2eutil.TestContext, TestConfig) {`
`60`		`- textCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv))`
	`60`	`+ textCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv)) // nolint:forbidigo`
`61`	`61`
`62`	`62`	`if err != nil {`
`63`	`63`	`t.Fatal(err)`
`@@ -76,7 +76,7 @@ func SetupWithTLS(ctx context.Context, t *testing.T, resourceName string, additi`
`76`	`76`	`}`
`77`	`77`
`78`	`78`	`func SetupWithTestConfig(ctx context.Context, t testing.T, testConfig TestConfig, withTLS, defaultOperator bool, resourceName string) e2eutil.TestContext {`
`79`		`- testCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv))`
	`79`	`+ testCtx, err := e2eutil.NewContext(ctx, t, envvar.ReadBool(performCleanupEnv)) // nolint:forbidigo`
`80`	`80`
`81`	`81`	`if err != nil {`
`82`	`82`	`t.Fatal(err)`