Add goleak to all tests (#227)

* Run goleak as part of all tests
We are already using goleak in various tests.
This commit adds a TestMain to all remaining tests
and calls goleak.VerifyTestMain in them.
* Add goleak to debugd/deploy package and fix bug.
* Run go mod tidy
* Fix integration tests
* Move goleak invocation for mount integration test
* Ignore leak in state integration tests

Co-authored-by: Fabian Kammel <fk@edgelss.systems>

access_manager/access_manager_test.go

@@ -15,9 +15,14 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	v1 "k8s.io/api/core/v1"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestEvictUser(t *testing.T) {
 	require := require.New(t)
 	assert := assert.New(t)

activation/kms/kms_test.go

@@ -8,6 +8,7 @@ import (
 	"github.com/edgelesssys/constellation/internal/logger"
 	"github.com/edgelesssys/constellation/kms/kmsproto"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/test/bufconn"
 )
@@ -21,6 +22,10 @@ func (c *stubClient) GetDataKey(context.Context, *kmsproto.GetDataKeyRequest, *g
 	return &kmsproto.GetDataKeyResponse{DataKey: c.dataKey}, c.getDataKeyErr
 }
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestGetDataKey(t *testing.T) {
 	testCases := map[string]struct {
 		client  *stubClient

activation/kubeadm/kubeadm_test.go

@@ -11,6 +11,7 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	v1 "k8s.io/api/core/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	clientset "k8s.io/client-go/kubernetes"
@@ -19,6 +20,10 @@ import (
 	fakecorev1 "k8s.io/client-go/kubernetes/typed/core/v1/fake"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestGetJoinToken(t *testing.T) {
 	validConf := `apiVersion: v1
 kind: Config

activation/kubernetesca/kubernetesca_test.go

@@ -18,8 +18,13 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestGetCertificate(t *testing.T) {
 	ecCert, ecKey := mustCreateCert(mustCreateECKey)
 	rsaCert, rsaKey := mustCreateCert(mustCreateRSAKey)

activation/server/server_test.go

@@ -16,9 +16,14 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	kubeadmv1 "k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta3"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestActivateNode(t *testing.T) {
 	someErr := errors.New("error")
 	testKey := []byte{0x1, 0x2, 0x3}

cli/internal/azure/autoscaling_node_group_test.go

@@ -4,8 +4,13 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestAutoscalingNodeGroup(t *testing.T) {
 	assert := assert.New(t)
 	nodeGroups := AutoscalingNodeGroup("scale-set", 0, 100)

cli/internal/azure/client/client_test.go

@@ -8,8 +8,13 @@ import (
 	"github.com/edgelesssys/constellation/internal/state"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestSetGetState(t *testing.T) {
 	testCases := map[string]struct {
 		state   state.ConstellationState

cli/internal/cloudcmd/clients_test.go

@@ -4,6 +4,7 @@ import (
 	"context"
 	"errors"
 	"strconv"
+	"testing"
 
 	azurecl "github.com/edgelesssys/constellation/cli/internal/azure/client"
 	gcpcl "github.com/edgelesssys/constellation/cli/internal/gcp/client"
@@ -12,8 +13,16 @@ import (
 	"github.com/edgelesssys/constellation/internal/cloud/cloudtypes"
 	"github.com/edgelesssys/constellation/internal/gcpshared"
 	"github.com/edgelesssys/constellation/internal/state"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 type fakeAzureClient struct {
 	nodes        cloudtypes.Instances
 	coordinators cloudtypes.Instances

cli/internal/cmd/cloud_test.go

@@ -2,12 +2,21 @@ package cmd
 
 import (
 	"context"
+	"testing"
 
 	"github.com/edgelesssys/constellation/internal/cloud/cloudprovider"
 	"github.com/edgelesssys/constellation/internal/config"
 	"github.com/edgelesssys/constellation/internal/state"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 type stubCloudCreator struct {
 	createCalled bool
 	state        state.ConstellationState

cli/internal/gcp/autoscaling_node_group_test.go

@@ -4,8 +4,13 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestAutoscalingNodeGroup(t *testing.T) {
 	assert := assert.New(t)
 	nodeGroups := AutoscalingNodeGroup("some-project", "some-zone", "some-group", 0, 100)

cli/internal/gcp/client/client_test.go

@@ -9,8 +9,16 @@ import (
 	"github.com/edgelesssys/constellation/internal/state"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 func TestSetGetState(t *testing.T) {
 	testCases := map[string]struct {
 		state   state.ConstellationState

cli/internal/proto/client_test.go

@@ -12,12 +12,20 @@ import (
 	"github.com/edgelesssys/constellation/coordinator/state"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/connectivity"
 	"google.golang.org/grpc/credentials/insecure"
 	"google.golang.org/grpc/test/bufconn"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 func TestClose(t *testing.T) {
 	assert := assert.New(t)
 	require := require.New(t)

cli/internal/vpn/vpn_test.go

@@ -7,9 +7,14 @@ import (
 	wgquick "github.com/nmiculinic/wg-quick-go"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestCreate(t *testing.T) {
 	require := require.New(t)
 

coordinator/cloudprovider/azure/api_test.go

@@ -2,12 +2,21 @@ package azure
 
 import (
 	"context"
+	"testing"
 
 	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute"
 	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork"
 	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 type stubIMDSAPI struct {
 	res         metadataResponse
 	retrieveErr error

coordinator/cloudprovider/role_test.go

@@ -6,8 +6,16 @@ import (
 	"github.com/edgelesssys/constellation/coordinator/core"
 	"github.com/edgelesssys/constellation/coordinator/role"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 func TestExtractRole(t *testing.T) {
 	testCases := map[string]struct {
 		metadata map[string]string

coordinator/diskencryption/diskencryption_test.go

@@ -8,8 +8,13 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestOpenClose(t *testing.T) {
 	testCases := map[string]struct {
 		initByNameErr error

coordinator/kubernetes/k8sapi/kubectl/client/client_test.go

@@ -10,6 +10,7 @@ import (
 	"github.com/edgelesssys/constellation/coordinator/kubernetes/k8sapi/resources"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	"google.golang.org/protobuf/proto"
 	apps "k8s.io/api/apps/v1"
 	k8s "k8s.io/api/core/v1"
@@ -26,6 +27,10 @@ import (
 	"k8s.io/client-go/restmapper"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 var (
 	corev1GV        = schema.GroupVersion{Version: "v1"}
 	nginxDeployment = &apps.Deployment{

coordinator/kubernetes/k8sapi/kubectl/kubectl_test.go

@@ -6,9 +6,14 @@ import (
 
 	"github.com/edgelesssys/constellation/coordinator/kubernetes/k8sapi/resources"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 	"k8s.io/cli-runtime/pkg/resource"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 type stubClient struct {
 	applyOneObjectErr error
 	getObjectsInfos   []*resource.Info

coordinator/kubernetes/k8sapi/resources/access_manager_test.go

@@ -5,8 +5,13 @@ import (
 
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestAccessManagerMarshalUnmarshal(t *testing.T) {
 	require := require.New(t)
 	assert := assert.New(t)

coordinator/nodestate/nodestate_test.go

@@ -9,8 +9,13 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestFromFile(t *testing.T) {
 	testCases := map[string]struct {
 		fileContents string

coordinator/role/role_test.go

@@ -5,8 +5,13 @@ import (
 
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestMarshal(t *testing.T) {
 	testCases := map[string]struct {
 		role     Role

coordinator/wireguard/wireguard_test.go

@@ -7,9 +7,14 @@ import (
 	"github.com/edgelesssys/constellation/coordinator/peer"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestUpdatePeer(t *testing.T) {
 	requirePre := require.New(t)
 

debugd/coordinator/streamer_test.go

@@ -9,8 +9,13 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestWriteStream(t *testing.T) {
 	filename := "testfile"
 

debugd/debugd/deploy/download_test.go

@@ -15,10 +15,18 @@ import (
 	"github.com/edgelesssys/constellation/internal/grpc/testdialer"
 	"github.com/edgelesssys/constellation/internal/logger"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 	"google.golang.org/grpc"
 	"google.golang.org/protobuf/proto"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 func TestDownloadCoordinator(t *testing.T) {
 	filename := "/opt/coordinator"
 

debugd/debugd/deploy/service.go

@@ -86,7 +86,7 @@ func (s *ServiceManager) SystemdAction(ctx context.Context, request ServiceManag
 		return fmt.Errorf("establishing systemd connection: %w", err)
 	}
 
-	resultChan := make(chan string)
+	resultChan := make(chan string, 1)
 	switch request.Action {
 	case Start:
 		_, err = conn.StartUnitContext(ctx, request.Unit, "replace", resultChan)

debugd/debugd/deploy/service_test.go

@@ -218,26 +218,22 @@ type fakeDbusConn struct {
 
 func (f *fakeDbusConn) StartUnitContext(ctx context.Context, name string, mode string, ch chan<- string) (int, error) {
 	f.inputs = append(f.inputs, dbusConnActionInput{name: name, mode: mode})
-	go func() {
-		ch <- f.result
-	}()
+	ch <- f.result
 
 	return f.jobID, f.actionErr
 }
 
 func (f *fakeDbusConn) StopUnitContext(ctx context.Context, name string, mode string, ch chan<- string) (int, error) {
 	f.inputs = append(f.inputs, dbusConnActionInput{name: name, mode: mode})
-	go func() {
-		ch <- f.result
-	}()
+	ch <- f.result
+
 	return f.jobID, f.actionErr
 }
 
 func (f *fakeDbusConn) RestartUnitContext(ctx context.Context, name string, mode string, ch chan<- string) (int, error) {
 	f.inputs = append(f.inputs, dbusConnActionInput{name: name, mode: mode})
-	go func() {
-		ch <- f.result
-	}()
+	ch <- f.result
+
 	return f.jobID, f.actionErr
 }
 

debugd/debugd/metadata/cloudprovider/cloudprovider_test.go

@@ -9,8 +9,16 @@ import (
 	"github.com/edgelesssys/constellation/internal/deploy/ssh"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 func TestDiscoverDebugIPs(t *testing.T) {
 	err := errors.New("some err")
 

debugd/debugd/metadata/fallback/fallback_test.go

@@ -5,8 +5,13 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestDiscoverDebugdIPs(t *testing.T) {
 	assert := assert.New(t)
 

debugd/debugd/metadata/scheduler_test.go

@@ -10,8 +10,13 @@ import (
 	"github.com/edgelesssys/constellation/internal/deploy/ssh"
 	"github.com/edgelesssys/constellation/internal/logger"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestSchedulerStart(t *testing.T) {
 	testCases := map[string]struct {
 		fetcher             stubFetcher

debugd/debugd/server/server_test.go

@@ -16,10 +16,15 @@ import (
 	"github.com/edgelesssys/constellation/internal/logger"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/credentials/insecure"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestUploadAuthorizedKeys(t *testing.T) {
 	endpoint := "192.0.2.1:4000"
 

hack/go.mod

@@ -43,6 +43,7 @@ require (
 	github.com/spf13/afero v1.8.2
 	github.com/spf13/cobra v1.5.0
 	github.com/stretchr/testify v1.7.1
+	go.uber.org/goleak v1.1.12
 	go.uber.org/zap v1.21.0
 	google.golang.org/grpc v1.46.2
 	gopkg.in/yaml.v3 v3.0.0-20220512140231-539c8e751b99

hack/go.sum

@@ -1016,6 +1016,7 @@ go.uber.org/atomic v1.9.0/go.mod h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc=
 go.uber.org/goleak v1.1.10/go.mod h1:8a7PlsEVH3e/a/GLqe5IIrQx6GzcnRmZEufDUTk4A7A=
 go.uber.org/goleak v1.1.11/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
 go.uber.org/goleak v1.1.12 h1:gZAh5/EyT/HQwlpkCy6wTpqfH9H8Lz8zbm3dZh+OyzA=
+go.uber.org/goleak v1.1.12/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
 go.uber.org/multierr v1.1.0/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0=
 go.uber.org/multierr v1.3.0/go.mod h1:VgVr7evmIr6uPjLBxg28wmKNXyqE9akIJ5XnfpiKl+4=
 go.uber.org/multierr v1.4.0/go.mod h1:VgVr7evmIr6uPjLBxg28wmKNXyqE9akIJ5XnfpiKl+4=
@@ -1079,6 +1080,7 @@ golang.org/x/lint v0.0.0-20191125180803-fdd1cda4f05f/go.mod h1:5qLYkcX4OjUUV8bRu
 golang.org/x/lint v0.0.0-20200130185559-910be7a94367/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
 golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
 golang.org/x/lint v0.0.0-20201208152925-83fdc39ff7b5/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
+golang.org/x/lint v0.0.0-20210508222113-6edffad5e616 h1:VLliZ0d+/avPrXXH+OakdXhpJuEoBZuwh1m2j7U6Iug=
 golang.org/x/lint v0.0.0-20210508222113-6edffad5e616/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
 golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod h1:z+o9i4GpDbdi3rU15maQ/Ox0txvL9dWGYEHz965HBQE=
 golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028/go.mod h1:E/iHnbuqvinMTCcRqshq8CkpyQDoeVncDDYHnLhea+o=
@@ -1384,6 +1386,7 @@ golang.org/x/tools v0.1.1/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.2/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.3/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.4/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
+golang.org/x/tools v0.1.5 h1:ouewzE6p+/VEB31YYnTbEJdi8pFqKp4P4n85vwo3DHA=
 golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=

hack/pcr-reader/main_test.go

@@ -13,8 +13,16 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 func TestExportToFile(t *testing.T) {
 	testCases := map[string]struct {
 		pcrs    map[uint32][]byte

internal/attestation/azure/azure_test.go

@@ -10,8 +10,13 @@ import (
 	"github.com/edgelesssys/constellation/internal/attestation/vtpm"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestAttestation(t *testing.T) {
 	assert := assert.New(t)
 	require := require.New(t)

internal/attestation/gcp/gcp_test.go

@@ -10,8 +10,13 @@ import (
 	"github.com/edgelesssys/constellation/internal/attestation/vtpm"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestAttestation(t *testing.T) {
 	assert := assert.New(t)
 	require := require.New(t)

internal/attestation/simulator/simulator_disabled.go

@@ -5,8 +5,15 @@ package simulator
 
 import (
 	"io"
+	"testing"
+
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 // OpenSimulatedTPM returns a simulated TPM device.
 func OpenSimulatedTPM() (io.ReadWriteCloser, error) {
 	panic("simulator not enabled")

internal/attestation/vtpm/vtpm_test.go

@@ -4,8 +4,13 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestNOPTPM(t *testing.T) {
 	assert := assert.New(t)
 

internal/azureshared/appcredentials_test.go

@@ -6,8 +6,13 @@ import (
 
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestApplicationCredentialsFromURI(t *testing.T) {
 	creds := ApplicationCredentials{
 		TenantID:     "tenant-id",

internal/cloud/cloudtypes/instance_test.go

@@ -4,8 +4,13 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestIDs(t *testing.T) {
 	assert := assert.New(t)
 	testState := testInstances()

internal/config/config_test.go

@@ -9,8 +9,13 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestDefaultConfig(t *testing.T) {
 	assert := assert.New(t)
 	def := Default()

internal/deploy/ssh/ssh_test.go

@@ -10,8 +10,13 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestDeploySSHAuthorizedKey(t *testing.T) {
 	authorizedKey := UserKey{
 		Username:  "user",

internal/deploy/user/linux_user_test.go

@@ -8,8 +8,13 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestGetLinuxUser(t *testing.T) {
 	username := "user"
 

internal/file/file_test.go

@@ -8,9 +8,14 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	"gopkg.in/yaml.v3"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestReadJSON(t *testing.T) {
 	type testContent struct {
 		First  string

internal/gcpshared/metadata_test.go

@@ -4,8 +4,13 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestSplitProviderID(t *testing.T) {
 	testCases := map[string]struct {
 		providerID    string

internal/grpc/dialer/dialer_test.go

@@ -10,10 +10,15 @@ import (
 	"github.com/edgelesssys/constellation/internal/oid"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/test/grpc_testing"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestDial(t *testing.T) {
 	testCases := map[string]struct {
 		tls     bool

internal/statuswaiter/statuswaiter_test.go

@@ -13,12 +13,17 @@ import (
 	"github.com/edgelesssys/constellation/internal/grpc/atlscredentials"
 	"github.com/edgelesssys/constellation/internal/oid"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"
 	"google.golang.org/grpc/test/bufconn"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestInitializeValidators(t *testing.T) {
 	assert := assert.New(t)
 

internal/watcher/validator_test.go

@@ -20,8 +20,16 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 func TestNewUpdateableValidator(t *testing.T) {
 	testCases := map[string]struct {
 		provider  string

kms/internal/storage/memfsstroage_test.go

@@ -5,8 +5,16 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 func TestMemMapStorage(t *testing.T) {
 	assert := assert.New(t)
 

kms/kms/aws/aws_test.go

@@ -20,8 +20,16 @@ import (
 	"github.com/edgelesssys/constellation/kms/internal/storage"
 	kmsInterface "github.com/edgelesssys/constellation/kms/kms"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 const (
 	kekLen               = 32
 	importedPublicKeyLen = 2048

kms/kms/azure/azure_test.go

@@ -11,8 +11,16 @@ import (
 	"github.com/edgelesssys/constellation/kms/internal/storage"
 	"github.com/edgelesssys/constellation/kms/kms"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 type stubAzureClient struct {
 	setSecretCalled bool
 	setSecretErr    error

kms/kms/cluster/cluster_test.go

@@ -5,8 +5,13 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestCoordinatorKMS(t *testing.T) {
 	assert := assert.New(t)
 	kms := &ClusterKMS{}

kms/kms/gcp/gcp_test.go

@@ -10,12 +10,20 @@ import (
 	"github.com/edgelesssys/constellation/kms/kms/util"
 	"github.com/googleapis/gax-go/v2"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 	"google.golang.org/api/option"
 	kmspb "google.golang.org/genproto/googleapis/cloud/kms/v1"
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 var testKeyRSA = `-----BEGIN PUBLIC KEY-----
 MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu+OepfHCTiTi27nkTGke
 dn+AIkiM1AIWWDwqfqG85aNulcj60mGQGXIYV8LoEVkyKOhYBIUmJUaVczB4ltqq

kms/kms/util/crypto_test.go

@@ -4,8 +4,13 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestWrapKeyAES(t *testing.T) {
 	assert := assert.New(t)
 

kms/setup/setup_test.go

@@ -8,8 +8,16 @@ import (
 
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 func TestGetStore(t *testing.T) {
 	testCases := map[string]struct {
 		uri     string

mount/cryptmapper/cryptmapper_test.go

@@ -8,8 +8,13 @@ import (
 	"github.com/edgelesssys/constellation/mount/kms"
 	cryptsetup "github.com/martinjungblut/go-cryptsetup"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 type stubCryptDevice struct {
 	deviceName       string
 	uuid             string

mount/kms/constellation_test.go

@@ -7,10 +7,15 @@ import (
 
 	"github.com/edgelesssys/constellation/coordinator/vpnapi/vpnproto"
 	"github.com/stretchr/testify/assert"
+	"go.uber.org/goleak"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/test/bufconn"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 type stubVPNClient struct {
 	getDataKeyErr error
 	dataKey       []byte

mount/test/mount_integration_test.go

@@ -13,6 +13,7 @@ import (
 	"github.com/edgelesssys/constellation/mount/kms"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	"k8s.io/klog/v2"
 )
 
@@ -46,6 +47,8 @@ func TestMain(m *testing.M) {
 	klog.InitFlags(nil)
 	defer klog.Flush()
 
+	goleak.VerifyTestMain(m)
+
 	result := m.Run()
 	os.Exit(result)
 }

state/keyservice/keyservice_test.go

@@ -17,10 +17,18 @@ import (
 	"github.com/edgelesssys/constellation/state/keyservice/keyproto"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/test/bufconn"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+}
+
 func TestRequestKeyLoop(t *testing.T) {
 	defaultInstance := cloudtypes.Instance{
 		Name:       "test-instance",

state/setup/setup_test.go

@@ -15,8 +15,13 @@ import (
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 )
 
+func TestMain(m *testing.M) {
+	goleak.VerifyTestMain(m)
+}
+
 func TestPrepareExistingDisk(t *testing.T) {
 	someErr := errors.New("error")
 

state/test/integration_test.go

@@ -22,6 +22,7 @@ import (
 	"github.com/martinjungblut/go-cryptsetup"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"go.uber.org/goleak"
 	"google.golang.org/grpc"
 )
 
@@ -44,6 +45,11 @@ func TestMain(m *testing.M) {
 		os.Exit(1)
 	}
 
+	goleak.VerifyTestMain(m,
+		// https://github.com/census-instrumentation/opencensus-go/issues/1262
+		goleak.IgnoreTopFunction("go.opencensus.io/stats/view.(*worker).start"),
+	)
+
 	result := m.Run()
 	os.Exit(result)
 }