chore(tests): allow for the tests to run in parallel BE-12801 (#2231)

api/adminmonitor/admin_monitor_test.go

@@ -11,17 +11,20 @@ import (
 )
 
 func Test_stopWithoutStarting(t *testing.T) {
+	t.Parallel()
 	monitor := New(1*time.Minute, nil)
 	monitor.Stop()
 }
 
 func Test_stopCouldBeCalledMultipleTimes(t *testing.T) {
+	t.Parallel()
 	monitor := New(1*time.Minute, nil)
 	monitor.Stop()
 	monitor.Stop()
 }
 
 func Test_startOrStopCouldBeCalledMultipleTimesConcurrently(t *testing.T) {
+	t.Parallel()
 	synctest.Test(t, test_startOrStopCouldBeCalledMultipleTimesConcurrently)
 }
 
@@ -38,6 +41,7 @@ func test_startOrStopCouldBeCalledMultipleTimesConcurrently(t *testing.T) {
 }
 
 func Test_canStopStartedMonitor(t *testing.T) {
+	t.Parallel()
 	monitor := New(1*time.Minute, nil)
 	monitor.Start(t.Context())
 	assert.NotNil(t, monitor.cancellationFunc, "cancellation function is missing in started monitor")
@@ -47,6 +51,7 @@ func Test_canStopStartedMonitor(t *testing.T) {
 }
 
 func Test_start_shouldDisableInstanceAfterTimeout_ifNotInitialized(t *testing.T) {
+	t.Parallel()
 	timeout := 10 * time.Millisecond
 
 	datastore := i.NewDatastore(i.WithUsers([]portainer.User{}))

api/apikey/apikey_test.go

@@ -7,6 +7,7 @@ import (
 )
 
 func Test_generateRandomKey(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	tests := []struct {

api/apikey/cache_test.go

@@ -8,6 +8,7 @@ import (
 )
 
 func Test_apiKeyCacheGet(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	keyCache := NewAPIKeyCache(10, compareUser)
@@ -43,6 +44,7 @@ func Test_apiKeyCacheGet(t *testing.T) {
 }
 
 func Test_apiKeyCacheSet(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	keyCache := NewAPIKeyCache(10, compareUser)
@@ -68,6 +70,7 @@ func Test_apiKeyCacheSet(t *testing.T) {
 }
 
 func Test_apiKeyCacheDelete(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	keyCache := NewAPIKeyCache(10, compareUser)
@@ -87,6 +90,7 @@ func Test_apiKeyCacheDelete(t *testing.T) {
 }
 
 func Test_apiKeyCacheLRU(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	tests := []struct {
@@ -148,6 +152,7 @@ func Test_apiKeyCacheLRU(t *testing.T) {
 }
 
 func Test_apiKeyCacheInvalidateUserKeyCache(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	keyCache := NewAPIKeyCache(10, compareUser)

api/apikey/service_test.go

@@ -17,11 +17,13 @@ import (
 )
 
 func Test_SatisfiesAPIKeyServiceInterface(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 	is.Implements((*APIKeyService)(nil), NewAPIKeyService(nil, nil))
 }
 
 func Test_GenerateApiKey(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	_, store := datastore.MustNewTestStore(t, true, true)
@@ -75,6 +77,7 @@ func Test_GenerateApiKey(t *testing.T) {
 }
 
 func Test_GetAPIKey(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	_, store := datastore.MustNewTestStore(t, true, true)
@@ -94,6 +97,7 @@ func Test_GetAPIKey(t *testing.T) {
 }
 
 func Test_GetAPIKeys(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	_, store := datastore.MustNewTestStore(t, true, true)
@@ -114,6 +118,7 @@ func Test_GetAPIKeys(t *testing.T) {
 }
 
 func Test_GetDigestUserAndKey(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	_, store := datastore.MustNewTestStore(t, true, true)
@@ -149,6 +154,7 @@ func Test_GetDigestUserAndKey(t *testing.T) {
 }
 
 func Test_UpdateAPIKey(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	_, store := datastore.MustNewTestStore(t, true, true)
@@ -197,6 +203,7 @@ func Test_UpdateAPIKey(t *testing.T) {
 }
 
 func Test_DeleteAPIKey(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	_, store := datastore.MustNewTestStore(t, true, true)
@@ -237,6 +244,7 @@ func Test_DeleteAPIKey(t *testing.T) {
 }
 
 func Test_InvalidateUserKeyCache(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	_, store := datastore.MustNewTestStore(t, true, true)

api/archive/targz_test.go

@@ -34,6 +34,7 @@ func listFiles(dir string) []string {
 }
 
 func Test_shouldCreateArchive(t *testing.T) {
+	t.Parallel()
 	tmpdir := t.TempDir()
 	content := []byte("content")
 
@@ -74,6 +75,7 @@ func Test_shouldCreateArchive(t *testing.T) {
 }
 
 func Test_shouldCreateArchive2(t *testing.T) {
+	t.Parallel()
 	tmpdir := t.TempDir()
 	content := []byte("content")
 
@@ -113,6 +115,7 @@ func Test_shouldCreateArchive2(t *testing.T) {
 }
 
 func TestExtractTarGzPathTraversal(t *testing.T) {
+	t.Parallel()
 	testDir := t.TempDir()
 
 	// Create an evil file with a path traversal attempt

api/archive/zip_test.go

@@ -9,6 +9,7 @@ import (
 )
 
 func TestUnzipFile(t *testing.T) {
+	t.Parallel()
 	dir := t.TempDir()
 	/*
 		Archive structure.

api/aws/ecr/parse_endpoints_test.go

@@ -5,6 +5,7 @@ import (
 )
 
 func TestParseECREndpoint(t *testing.T) {
+	t.Parallel()
 	tests := []struct {
 		name      string
 		url       string

api/chisel/crypto/crypto_test.go

@@ -6,6 +6,7 @@ import (
 )
 
 func TestGenerateGo119CompatibleKey(t *testing.T) {
+	t.Parallel()
 	type args struct {
 		seed string
 	}

api/chisel/service_test.go

@@ -18,6 +18,7 @@ func init() {
 }
 
 func TestPingAgentPanic(t *testing.T) {
+	t.Parallel()
 	endpoint := &portainer.Endpoint{
 		ID:          1,
 		EdgeID:      "test-edge-id",

api/chisel/tunnel_test.go

@@ -28,6 +28,7 @@ func (s *testStore) Settings() dataservices.SettingsService {
 }
 
 func TestGetUnusedPort(t *testing.T) {
+	t.Parallel()
 	testCases := []struct {
 		name            string
 		existingTunnels map[portainer.EndpointID]*portainer.TunnelDetails

api/cmd/portainer/main_test.go

@@ -18,6 +18,7 @@ func createPasswordFile(t *testing.T, secretPath, password string) string {
 }
 
 func TestLoadEncryptionSecretKey(t *testing.T) {
+	t.Parallel()
 	tempDir := t.TempDir()
 	secretPath := path.Join(tempDir, secretFileName)
 
@@ -39,6 +40,7 @@ func TestLoadEncryptionSecretKey(t *testing.T) {
 }
 
 func TestDBSecretPath(t *testing.T) {
+	t.Parallel()
 	tests := []struct {
 		keyFilenameFlag string
 		expected        string

api/crypto/aes_test.go

@@ -141,6 +141,7 @@ func Test_encryptAndDecrypt_withTheSamePassword(t *testing.T) {
 }
 
 func Test_encryptAndDecrypt_withStrongPassphrase(t *testing.T) {
+	t.Parallel()
 	const passphrase = "A strong passphrase with special characters: !@#$%^&*()_+"
 
 	testFunc := func(t *testing.T, encrypt encryptFunc, decrypt decryptFunc) {
@@ -200,6 +201,7 @@ func Test_encryptAndDecrypt_withStrongPassphrase(t *testing.T) {
 }
 
 func Test_encryptAndDecrypt_withTheSamePasswordSmallFile(t *testing.T) {
+	t.Parallel()
 	testFunc := func(t *testing.T, encrypt encryptFunc, decrypt decryptFunc) {
 		tmpdir := t.TempDir()
 
@@ -257,6 +259,7 @@ func Test_encryptAndDecrypt_withTheSamePasswordSmallFile(t *testing.T) {
 }
 
 func Test_encryptAndDecrypt_withEmptyPassword(t *testing.T) {
+	t.Parallel()
 	testFunc := func(t *testing.T, encrypt encryptFunc, decrypt decryptFunc) {
 		tmpdir := t.TempDir()
 
@@ -314,6 +317,7 @@ func Test_encryptAndDecrypt_withEmptyPassword(t *testing.T) {
 }
 
 func Test_decryptWithDifferentPassphrase_shouldProduceWrongResult(t *testing.T) {
+	t.Parallel()
 	testFunc := func(t *testing.T, encrypt encryptFunc, decrypt decryptFunc) {
 		tmpdir := t.TempDir()
 
@@ -385,6 +389,7 @@ func legacyAesEncrypt(input io.Reader, output io.Writer, passphrase []byte) erro
 }
 
 func Test_hasEncryptedHeader(t *testing.T) {
+	t.Parallel()
 	tests := []struct {
 		name     string
 		data     []byte

api/crypto/ecdsa_test.go

@@ -7,6 +7,7 @@ import (
 )
 
 func TestCreateSignature(t *testing.T) {
+	t.Parallel()
 	var s = NewECDSAService("secret")
 
 	privKey, pubKey, err := s.GenerateKeyPair()

api/crypto/hash_test.go

@@ -7,6 +7,7 @@ import (
 )
 
 func TestService_Hash(t *testing.T) {
+	t.Parallel()
 	var s = Service{}
 
 	type args struct {
@@ -55,6 +56,7 @@ func TestService_Hash(t *testing.T) {
 }
 
 func TestHash(t *testing.T) {
+	t.Parallel()
 	s := Service{}
 
 	hash, err := s.Hash("Passw0rd!")

api/crypto/tls_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestCreateTLSConfiguration(t *testing.T) {
+	t.Parallel()
 	// InsecureSkipVerify = false
 	config := CreateTLSConfiguration(false)
 	require.Equal(t, config.MinVersion, uint16(tls.VersionTLS12)) //nolint:forbidigo
@@ -22,6 +23,7 @@ func TestCreateTLSConfiguration(t *testing.T) {
 }
 
 func TestCreateTLSConfigurationFIPS(t *testing.T) {
+	t.Parallel()
 	fips := true
 
 	fipsCipherSuites := []uint16{
@@ -42,6 +44,7 @@ func TestCreateTLSConfigurationFIPS(t *testing.T) {
 }
 
 func TestCreateTLSConfigurationFromBytes(t *testing.T) {
+	t.Parallel()
 	// No TLS
 	config, err := CreateTLSConfigurationFromBytes(false, nil, nil, nil, false, false)
 	require.NoError(t, err)
@@ -59,6 +62,7 @@ func TestCreateTLSConfigurationFromBytes(t *testing.T) {
 }
 
 func TestCreateTLSConfigurationFromDisk(t *testing.T) {
+	t.Parallel()
 	// No TLS
 	config, err := CreateTLSConfigurationFromDisk(portainer.TLSConfiguration{})
 	require.NoError(t, err)
@@ -74,6 +78,7 @@ func TestCreateTLSConfigurationFromDisk(t *testing.T) {
 }
 
 func TestCreateTLSConfigurationFromDiskFIPS(t *testing.T) {
+	t.Parallel()
 	fips := true
 
 	// Skipping TLS verifications cannot be done in FIPS mode

api/database/boltdb/db_test.go

@@ -13,6 +13,7 @@ import (
 )
 
 func Test_NeedsEncryptionMigration(t *testing.T) {
+	t.Parallel()
 	// Test the specific scenarios mentioned in NeedsEncryptionMigration
 
 	// i.e.
@@ -143,6 +144,7 @@ func Test_NeedsEncryptionMigration(t *testing.T) {
 }
 
 func TestDBCompaction(t *testing.T) {
+	t.Parallel()
 	db := &DbConnection{Path: t.TempDir()}
 
 	err := db.Open()

api/database/boltdb/json_test.go

@@ -27,6 +27,7 @@ func secretToEncryptionKey(passphrase string) []byte {
 }
 
 func Test_MarshalObjectUnencrypted(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	uuid := uuid.New()
@@ -101,6 +102,7 @@ func Test_MarshalObjectUnencrypted(t *testing.T) {
 }
 
 func Test_UnMarshalObjectUnencrypted(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	// Based on actual data entering and what we expect out of the function
@@ -142,6 +144,7 @@ func Test_UnMarshalObjectUnencrypted(t *testing.T) {
 }
 
 func Test_ObjectMarshallingEncrypted(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	// Based on actual data entering and what we expect out of the function
@@ -184,6 +187,7 @@ func Test_ObjectMarshallingEncrypted(t *testing.T) {
 }
 
 func Test_NonceSources(t *testing.T) {
+	t.Parallel()
 	// ensure that the new go 1.24 NewGCMWithRandomNonce works correctly with
 	// the old way of creating and including the nonce
 

api/database/boltdb/tx_test.go

@@ -18,6 +18,7 @@ type testStruct struct {
 }
 
 func TestTxs(t *testing.T) {
+	t.Parallel()
 	conn := DbConnection{Path: t.TempDir()}
 
 	err := conn.Open()

api/database/database_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestNewDatabase(t *testing.T) {
+	t.Parallel()
 	dbPath := filesystem.JoinPaths(t.TempDir(), "test.db")
 	connection, err := NewDatabase("boltdb", dbPath, nil, false)
 	require.NoError(t, err)

api/dataservices/base_test.go

@@ -51,6 +51,7 @@ func (m mockConnection) ConvertToKey(v int) []byte {
 	return []byte(strconv.Itoa(v))
 }
 func TestReadAll(t *testing.T) {
+	t.Parallel()
 	service := BaseDataService[testObject, int]{
 		Bucket:     "testBucket",
 		Connection: mockConnection{store: make(map[int]testObject)},

api/dataservices/customtemplate/customtemplate_test.go

@@ -9,6 +9,7 @@ import (
 )
 
 func TestCustomTemplateCreate(t *testing.T) {
+	t.Parallel()
 	_, ds := datastore.MustNewTestStore(t, false, false)
 	require.NotNil(t, ds)
 

api/dataservices/customtemplate/tx_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestCustomTemplateCreateTx(t *testing.T) {
+	t.Parallel()
 	_, ds := datastore.MustNewTestStore(t, false, false)
 	require.NotNil(t, ds)
 

api/dataservices/edgestack/edgestack_test.go

@@ -11,6 +11,7 @@ import (
 )
 
 func TestUpdate(t *testing.T) {
+	t.Parallel()
 	var conn portainer.Connection = &boltdb.DbConnection{Path: t.TempDir()}
 	err := conn.Open()
 	require.NoError(t, err)

api/dataservices/endpointrelation/endpointrelation_test.go

@@ -13,6 +13,7 @@ import (
 )
 
 func TestUpdateRelation(t *testing.T) {
+	t.Parallel()
 	const endpointID = 1
 	const edgeStackID1 = 1
 	const edgeStackID2 = 2
@@ -106,6 +107,7 @@ func TestUpdateRelation(t *testing.T) {
 }
 
 func TestAddEndpointRelationsForEdgeStack(t *testing.T) {
+	t.Parallel()
 	var conn portainer.Connection = &boltdb.DbConnection{Path: t.TempDir()}
 	err := conn.Open()
 	require.NoError(t, err)
@@ -125,6 +127,7 @@ func TestAddEndpointRelationsForEdgeStack(t *testing.T) {
 }
 
 func TestEndpointRelations(t *testing.T) {
+	t.Parallel()
 	var conn portainer.Connection = &boltdb.DbConnection{Path: t.TempDir()}
 	err := conn.Open()
 	require.NoError(t, err)

api/dataservices/pendingactions/pendingactions_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestDeleteByEndpoint(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, false)
 
 	// Create Endpoint 1

api/dataservices/stack/tests/stack_test.go

@@ -27,6 +27,7 @@ type stackBuilder struct {
 }
 
 func TestService_StackByWebhookID(t *testing.T) {
+	t.Parallel()
 	if testing.Short() {
 		t.Skip("skipping test in short mode. Normally takes ~1s to run.")
 	}
@@ -84,6 +85,7 @@ func (b *stackBuilder) createNewStack(webhookID string) portainer.Stack {
 }
 
 func Test_RefreshableStacks(t *testing.T) {
+	t.Parallel()
 	if testing.Short() {
 		t.Skip("skipping test in short mode. Normally takes ~1s to run.")
 	}

api/dataservices/team/tests/team_test.go

@@ -31,6 +31,7 @@ func (b *teamBuilder) createNew(name string) *portainer.Team {
 }
 
 func Test_teamByName(t *testing.T) {
+	t.Parallel()
 	t.Run("When store is empty should return ErrObjectNotFound", func(t *testing.T) {
 		_, store := datastore.MustNewTestStore(t, false, true)
 

api/datastore/backup_test.go

@@ -13,6 +13,7 @@ import (
 )
 
 func TestStoreCreation(t *testing.T) {
+	t.Parallel()
 	_, store := MustNewTestStore(t, true, true)
 	require.NotNil(t, store)
 
@@ -31,6 +32,7 @@ func TestStoreCreation(t *testing.T) {
 }
 
 func TestBackup(t *testing.T) {
+	t.Parallel()
 	_, store := MustNewTestStore(t, true, true)
 	backupFileName := store.backupFilename()
 	t.Run("Backup should create "+backupFileName, func(t *testing.T) {
@@ -52,6 +54,7 @@ func TestBackup(t *testing.T) {
 }
 
 func TestRestore(t *testing.T) {
+	t.Parallel()
 	_, store := MustNewTestStore(t, true, false)
 
 	t.Run("Basic Restore", func(t *testing.T) {
@@ -93,6 +96,7 @@ func TestRestore(t *testing.T) {
 }
 
 func TestBackupDBFile(t *testing.T) {
+	t.Parallel()
 	_, store := MustNewTestStore(t, true, false)
 
 	t.Run("creates backup file without managing connection state", func(t *testing.T) {
@@ -122,6 +126,7 @@ func TestBackupDBFile(t *testing.T) {
 }
 
 func TestBackupDBFileUsesCorrectPath(t *testing.T) {
+	t.Parallel()
 	_, store := MustNewTestStore(t, true, false)
 
 	t.Run("backs up unencrypted db when encrypted flag is false", func(t *testing.T) {

api/datastore/datastore_test.go

@@ -29,6 +29,7 @@ const (
 // TestStoreFull an eventually comprehensive set of tests for the Store.
 // The idea is what we write to the store, we should read back.
 func TestStoreFull(t *testing.T) {
+	t.Parallel()
 	_, store := MustNewTestStore(t, true, true)
 
 	testCases := map[string]func(t *testing.T){

api/datastore/migrate_data_test.go

@@ -174,6 +174,7 @@ func TestMigrateData(t *testing.T) {
 }
 
 func TestRollback(t *testing.T) {
+	t.Parallel()
 	t.Run("Rollback should restore upgrade after backup", func(t *testing.T) {
 		version := "2.11"
 

api/datastore/migrate_dbversion29_test.go

@@ -26,6 +26,7 @@ func setup(store *Store) error {
 }
 
 func TestMigrateSettings(t *testing.T) {
+	t.Parallel()
 	_, store := MustNewTestStore(t, false, true)
 
 	err := setup(store)

api/datastore/migrate_dbversion33_test.go

@@ -12,6 +12,7 @@ import (
 )
 
 func TestMigrateStackEntryPoint(t *testing.T) {
+	t.Parallel()
 	_, store := MustNewTestStore(t, false, true)
 
 	stackService := store.Stack()

api/datastore/migrator/migrate_2_33_test.go

@@ -12,6 +12,7 @@ import (
 )
 
 func TestMigrateEdgeGroupEndpointsToRoars_2_33_0Idempotency(t *testing.T) {
+	t.Parallel()
 	var conn portainer.Connection = &boltdb.DbConnection{Path: t.TempDir()}
 	err := conn.Open()
 	require.NoError(t, err)

api/datastore/migrator/migrate_2_40_test.go

@@ -15,6 +15,7 @@ import (
 )
 
 func TestMigrateRegistryAccessSASecrets_2_40_0(t *testing.T) {
+	t.Parallel()
 	var conn portainer.Connection = &boltdb.DbConnection{Path: t.TempDir()}
 	err := conn.Open()
 	require.NoError(t, err)

api/datastore/pendingactions_test.go

@@ -14,6 +14,7 @@ type cleanNAPWithOverridePolicies struct {
 }
 
 func Test_ConvertCleanNAPWithOverridePoliciesPayload(t *testing.T) {
+	t.Parallel()
 	t.Run("test ConvertCleanNAPWithOverridePoliciesPayload", func(t *testing.T) {
 
 		_, store := MustNewTestStore(t, true, false)

api/datastore/postinit/migrate_post_init_test.go

@@ -18,6 +18,7 @@ import (
 )
 
 func TestMigrateGPUs(t *testing.T) {
+	t.Parallel()
 	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		if strings.HasSuffix(r.URL.Path, "/containers/json") {
 			containerSummary := []container.Summary{{ID: "container1"}}
@@ -79,6 +80,7 @@ func TestMigrateGPUs(t *testing.T) {
 }
 
 func TestPostInitMigrate_PendingActionsCreated(t *testing.T) {
+	t.Parallel()
 	tests := []struct {
 		name                   string
 		existingPendingActions []*portainer.PendingAction

api/docker/client/client_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestHttpClient(t *testing.T) {
+	t.Parallel()
 	fips.InitFIPS(false)
 
 	// Valid TLS configuration

api/docker/container_test.go

@@ -8,6 +8,7 @@ import (
 )
 
 func TestApplyVersionConstraint(t *testing.T) {
+	t.Parallel()
 	initialNet := network.NetworkingConfig{
 		EndpointsConfig: map[string]*network.EndpointSettings{
 			"key1": {

api/docker/images/digest_test.go

@@ -8,6 +8,7 @@ import (
 )
 
 func TestParseLocalImage(t *testing.T) {
+	t.Parallel()
 	// Test with a regular image
 
 	img, err := ParseLocalImage(image.InspectResponse{

api/docker/images/image_test.go

@@ -8,6 +8,7 @@ import (
 )
 
 func TestImageParser(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	// portainer/portainer-ee
@@ -62,6 +63,7 @@ func TestImageParser(t *testing.T) {
 }
 
 func TestUpdateParsedImage(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	// gcr.io/k8s-minikube/kicbase:v0.0.30@sha256:02c921df998f95e849058af14de7045efc3954d90320967418a0d1f182bbc0b2

api/docker/images/registry_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestFindBestMatchNeedAuthRegistry(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	t.Run("", func(t *testing.T) {

api/docker/stats/container_stats_test.go

@@ -25,6 +25,7 @@ func (m *MockDockerClient) ContainerInspect(ctx context.Context, containerID str
 }
 
 func TestCalculateContainerStats(t *testing.T) {
+	t.Parallel()
 	mockClient := new(MockDockerClient)
 
 	// Test containers - using enough containers to test concurrent processing
@@ -105,6 +106,7 @@ func TestCalculateContainerStats(t *testing.T) {
 }
 
 func TestCalculateContainerStatsAllErrors(t *testing.T) {
+	t.Parallel()
 	mockClient := new(MockDockerClient)
 
 	// Test containers
@@ -140,6 +142,7 @@ func TestCalculateContainerStatsAllErrors(t *testing.T) {
 }
 
 func TestGetContainerStatus(t *testing.T) {
+	t.Parallel()
 	testCases := []struct {
 		name     string
 		state    *container.State
@@ -232,6 +235,7 @@ func TestGetContainerStatus(t *testing.T) {
 }
 
 func TestCalculateContainerStatsForSwarm(t *testing.T) {
+	t.Parallel()
 	containers := []container.Summary{
 		{State: "running"},
 		{State: "running", Status: "Up 5 minutes (healthy)"},

api/exec/compose_stack_integration_test.go

@@ -41,6 +41,7 @@ func setup(t *testing.T) (*portainer.Stack, *portainer.Endpoint) {
 }
 
 func Test_UpAndDown(t *testing.T) {
+	t.Parallel()
 	testhelpers.IntegrationTest(t)
 
 	stack, endpoint := setup(t)

api/exec/compose_stack_test.go

@@ -14,6 +14,7 @@ import (
 )
 
 func Test_createEnvFile(t *testing.T) {
+	t.Parallel()
 	dir := t.TempDir()
 
 	tests := []struct {
@@ -70,6 +71,7 @@ func Test_createEnvFile(t *testing.T) {
 }
 
 func Test_createEnvFile_mergesDefultAndInplaceEnvVars(t *testing.T) {
+	t.Parallel()
 	dir := t.TempDir()
 	err := os.WriteFile(path.Join(dir, ".env"), []byte("VAR1=VAL1\nVAR2=VAL2\n"), 0600)
 	require.NoError(t, err)

api/exec/kubernetes_deploy_test.go

@@ -57,6 +57,7 @@ func testExecuteKubectlOperation(client *mockKubectlClient, operation string, ma
 }
 
 func TestExecuteKubectlOperation_Apply_Success(t *testing.T) {
+	t.Parallel()
 	called := false
 	mockClient := &mockKubectlClient{
 		applyFunc: func(ctx context.Context, files []string) error {
@@ -74,6 +75,7 @@ func TestExecuteKubectlOperation_Apply_Success(t *testing.T) {
 }
 
 func TestExecuteKubectlOperation_Apply_Error(t *testing.T) {
+	t.Parallel()
 	expectedErr := errors.New("kubectl apply failed")
 	called := false
 	mockClient := &mockKubectlClient{
@@ -93,6 +95,7 @@ func TestExecuteKubectlOperation_Apply_Error(t *testing.T) {
 }
 
 func TestExecuteKubectlOperation_Delete_Success(t *testing.T) {
+	t.Parallel()
 	called := false
 	mockClient := &mockKubectlClient{
 		deleteFunc: func(ctx context.Context, files []string) error {
@@ -110,6 +113,7 @@ func TestExecuteKubectlOperation_Delete_Success(t *testing.T) {
 }
 
 func TestExecuteKubectlOperation_Delete_Error(t *testing.T) {
+	t.Parallel()
 	expectedErr := errors.New("kubectl delete failed")
 	called := false
 	mockClient := &mockKubectlClient{
@@ -129,6 +133,7 @@ func TestExecuteKubectlOperation_Delete_Error(t *testing.T) {
 }
 
 func TestExecuteKubectlOperation_RolloutRestart_Success(t *testing.T) {
+	t.Parallel()
 	called := false
 	mockClient := &mockKubectlClient{
 		rolloutRestartFunc: func(ctx context.Context, resources []string) error {
@@ -146,6 +151,7 @@ func TestExecuteKubectlOperation_RolloutRestart_Success(t *testing.T) {
 }
 
 func TestExecuteKubectlOperation_RolloutRestart_Error(t *testing.T) {
+	t.Parallel()
 	expectedErr := errors.New("kubectl rollout restart failed")
 	called := false
 	mockClient := &mockKubectlClient{
@@ -165,6 +171,7 @@ func TestExecuteKubectlOperation_RolloutRestart_Error(t *testing.T) {
 }
 
 func TestExecuteKubectlOperation_UnsupportedOperation(t *testing.T) {
+	t.Parallel()
 	mockClient := &mockKubectlClient{}
 
 	err := testExecuteKubectlOperation(mockClient, "unsupported", []string{})

api/exec/swarm_stack_test.go

@@ -9,6 +9,7 @@ import (
 )
 
 func TestConfigFilePaths(t *testing.T) {
+	t.Parallel()
 	args := []string{"stack", "deploy", "--with-registry-auth"}
 	filePaths := []string{"dir/file", "dir/file-two", "dir/file-three"}
 	expected := []string{"stack", "deploy", "--with-registry-auth", "--compose-file", "dir/file", "--compose-file", "dir/file-two", "--compose-file", "dir/file-three"}
@@ -17,6 +18,7 @@ func TestConfigFilePaths(t *testing.T) {
 }
 
 func TestPrepareDockerCommandAndArgs(t *testing.T) {
+	t.Parallel()
 	binaryPath := "/test/dist"
 	configPath := "/test/config"
 	manager := &SwarmStackManager{

api/filesystem/copy_test.go

@@ -11,12 +11,14 @@ import (
 )
 
 func Test_copyFile_returnsError_whenSourceDoesNotExist(t *testing.T) {
+	t.Parallel()
 	tmpdir := t.TempDir()
 	err := copyFile("does-not-exist", tmpdir)
 	require.Error(t, err)
 }
 
 func Test_copyFile_shouldMakeAbackup(t *testing.T) {
+	t.Parallel()
 	tmpdir := t.TempDir()
 	content := []byte("content")
 
@@ -32,6 +34,7 @@ func Test_copyFile_shouldMakeAbackup(t *testing.T) {
 }
 
 func Test_CopyDir_shouldCopyAllFilesAndDirectories(t *testing.T) {
+	t.Parallel()
 	destination := t.TempDir()
 	err := CopyDir("./testdata/copy_test", destination, true)
 	require.NoError(t, err)
@@ -42,6 +45,7 @@ func Test_CopyDir_shouldCopyAllFilesAndDirectories(t *testing.T) {
 }
 
 func Test_CopyDir_shouldCopyOnlyDirContents(t *testing.T) {
+	t.Parallel()
 	destination := t.TempDir()
 	err := CopyDir("./testdata/copy_test", destination, false)
 	require.NoError(t, err)
@@ -52,6 +56,7 @@ func Test_CopyDir_shouldCopyOnlyDirContents(t *testing.T) {
 }
 
 func Test_CopyPath_shouldSkipWhenNotExist(t *testing.T) {
+	t.Parallel()
 	tmpdir := t.TempDir()
 	err := CopyPath("does-not-exists", tmpdir)
 	require.NoError(t, err)
@@ -60,6 +65,7 @@ func Test_CopyPath_shouldSkipWhenNotExist(t *testing.T) {
 }
 
 func Test_CopyPath_shouldCopyFile(t *testing.T) {
+	t.Parallel()
 	tmpdir := t.TempDir()
 	content := []byte("content")
 
@@ -78,6 +84,7 @@ func Test_CopyPath_shouldCopyFile(t *testing.T) {
 }
 
 func Test_CopyPath_shouldCopyDir(t *testing.T) {
+	t.Parallel()
 	destination := t.TempDir()
 	err := CopyPath("./testdata/copy_test", destination)
 	require.NoError(t, err)
@@ -88,6 +95,7 @@ func Test_CopyPath_shouldCopyDir(t *testing.T) {
 }
 
 func TestCopyPathPanic(t *testing.T) {
+	t.Parallel()
 	dir := t.TempDir()
 	p := filepath.Join(dir, "myfile")
 

api/filesystem/filesystem_fileexists_test.go

@@ -12,20 +12,24 @@ import (
 )
 
 func Test_fileSystemService_FileExists_whenFileExistsShouldReturnTrue(t *testing.T) {
+	t.Parallel()
 	service := createService(t)
 	testHelperFileExists_fileExists(t, service.FileExists)
 }
 
 func Test_fileSystemService_FileExists_whenFileNotExistsShouldReturnFalse(t *testing.T) {
+	t.Parallel()
 	service := createService(t)
 	testHelperFileExists_fileNotExists(t, service.FileExists)
 }
 
 func Test_FileExists_whenFileExistsShouldReturnTrue(t *testing.T) {
+	t.Parallel()
 	testHelperFileExists_fileExists(t, FileExists)
 }
 
 func Test_FileExists_whenFileNotExistsShouldReturnFalse(t *testing.T) {
+	t.Parallel()
 	testHelperFileExists_fileNotExists(t, FileExists)
 }
 

api/filesystem/filesystem_linux_test.go

@@ -3,6 +3,7 @@ package filesystem
 import "testing"
 
 func TestJoinPaths(t *testing.T) {
+	t.Parallel()
 	var ts = []struct {
 		trusted   string
 		untrusted string

api/filesystem/filesystem_move_test.go

@@ -12,6 +12,7 @@ import (
 var content = []byte("content")
 
 func Test_movePath_shouldFailIfSourceDirDoesNotExist(t *testing.T) {
+	t.Parallel()
 	sourceDir := "missing"
 	destinationDir := t.TempDir()
 	file1 := addFile(t, destinationDir, "dir", "file")
@@ -24,6 +25,7 @@ func Test_movePath_shouldFailIfSourceDirDoesNotExist(t *testing.T) {
 }
 
 func Test_movePath_shouldFailIfDestinationDirExists(t *testing.T) {
+	t.Parallel()
 	sourceDir := t.TempDir()
 	file1 := addFile(t, sourceDir, "dir", "file")
 	file2 := addFile(t, sourceDir, "file")
@@ -40,6 +42,7 @@ func Test_movePath_shouldFailIfDestinationDirExists(t *testing.T) {
 }
 
 func Test_movePath_succesIfOverwriteSetWhenDestinationDirExists(t *testing.T) {
+	t.Parallel()
 	sourceDir := t.TempDir()
 	file1 := addFile(t, sourceDir, "dir", "file")
 	file2 := addFile(t, sourceDir, "file")
@@ -56,6 +59,7 @@ func Test_movePath_succesIfOverwriteSetWhenDestinationDirExists(t *testing.T) {
 }
 
 func Test_movePath_successWhenSourceExistsAndDestinationIsMissing(t *testing.T) {
+	t.Parallel()
 	tmp := t.TempDir()
 	sourceDir := path.Join(tmp, "source")
 	err := os.Mkdir(sourceDir, 0766)

api/filesystem/filesystem_windows_test.go

@@ -3,6 +3,7 @@ package filesystem
 import "testing"
 
 func TestJoinPaths(t *testing.T) {
+	t.Parallel()
 	var ts = []struct {
 		trusted   string
 		untrusted string

api/filesystem/serialize_per_dev_configs_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestMultiFilterDirForPerDevConfigs(t *testing.T) {
+	t.Parallel()
 	f := func(dirEntries []DirEntry, configPath string, multiFilterArgs MultiFilterArgs, wantDirEntries []DirEntry) {
 		t.Helper()
 
@@ -80,6 +81,7 @@ func TestMultiFilterDirForPerDevConfigs(t *testing.T) {
 }
 
 func TestMultiFilterDirForPerDevConfigsWithDefaults(t *testing.T) {
+	t.Parallel()
 	f := func(dirEntries []DirEntry, configPath string, multiFilterArgs MultiFilterArgs, defaultFilenames []string, wantDirEntries []DirEntry) {
 		t.Helper()
 
@@ -180,6 +182,7 @@ func TestMultiFilterDirForPerDevConfigsWithDefaults(t *testing.T) {
 }
 
 func TestMultiFilterDirForPerDevConfigsEnvFiles(t *testing.T) {
+	t.Parallel()
 	f := func(dirEntries []DirEntry, configPath string, multiFilterArgs MultiFilterArgs, wantEnvFiles []string) {
 		t.Helper()
 
@@ -204,6 +207,7 @@ func TestMultiFilterDirForPerDevConfigsEnvFiles(t *testing.T) {
 }
 
 func TestIsInConfigDir(t *testing.T) {
+	t.Parallel()
 	f := func(dirEntry DirEntry, configPath string, expect bool) {
 		t.Helper()
 
@@ -225,6 +229,7 @@ func TestIsInConfigDir(t *testing.T) {
 }
 
 func TestShouldIncludeDir(t *testing.T) {
+	t.Parallel()
 	f := func(dirEntry DirEntry, deviceName, configPath string, expect bool) {
 		t.Helper()
 

api/filesystem/write_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func Test_WriteFile_CanStoreContentInANewFile(t *testing.T) {
+	t.Parallel()
 	tmpDir := t.TempDir()
 	tmpFilePath := path.Join(tmpDir, "dummy")
 
@@ -22,6 +23,7 @@ func Test_WriteFile_CanStoreContentInANewFile(t *testing.T) {
 }
 
 func Test_WriteFile_CanOverwriteExistingFile(t *testing.T) {
+	t.Parallel()
 	tmpDir := t.TempDir()
 	tmpFilePath := path.Join(tmpDir, "dummy")
 
@@ -37,6 +39,7 @@ func Test_WriteFile_CanOverwriteExistingFile(t *testing.T) {
 }
 
 func Test_WriteFile_CanWriteANestedPath(t *testing.T) {
+	t.Parallel()
 	tmpDir := t.TempDir()
 	tmpFilePath := path.Join(tmpDir, "dir", "sub-dir", "dummy")
 

api/git/azure_integration_test.go

@@ -17,6 +17,7 @@ import (
 const privateAzureRepoURL = "https://portainer.visualstudio.com/gitops-test/_git/gitops-test"
 
 func TestService_ClonePublicRepository_Azure(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	pat := getRequiredValue(t, "AZURE_DEVOPS_PAT")
@@ -74,6 +75,7 @@ func TestService_ClonePublicRepository_Azure(t *testing.T) {
 }
 
 func TestService_ClonePrivateRepository_Azure(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	pat := getRequiredValue(t, "AZURE_DEVOPS_PAT")
@@ -95,6 +97,7 @@ func TestService_ClonePrivateRepository_Azure(t *testing.T) {
 }
 
 func TestService_LatestCommitID_Azure(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	pat := getRequiredValue(t, "AZURE_DEVOPS_PAT")
@@ -113,6 +116,7 @@ func TestService_LatestCommitID_Azure(t *testing.T) {
 }
 
 func TestService_ListRefs_Azure(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	accessToken := getRequiredValue(t, "AZURE_DEVOPS_PAT")
@@ -132,6 +136,7 @@ func TestService_ListRefs_Azure(t *testing.T) {
 }
 
 func TestService_ListRefs_Azure_Concurrently(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	accessToken := getRequiredValue(t, "AZURE_DEVOPS_PAT")
@@ -149,6 +154,7 @@ func TestService_ListRefs_Azure_Concurrently(t *testing.T) {
 }
 
 func TestService_ListFiles_Azure(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	type args struct {
@@ -303,6 +309,7 @@ func TestService_ListFiles_Azure(t *testing.T) {
 }
 
 func TestService_ListFiles_Azure_Concurrently(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	accessToken := getRequiredValue(t, "AZURE_DEVOPS_PAT")

api/git/azure_test.go

@@ -18,6 +18,7 @@ import (
 )
 
 func Test_buildDownloadUrl(t *testing.T) {
+	t.Parallel()
 	a := NewAzureClient()
 	u, err := a.buildDownloadUrl(&azureOptions{
 		organisation: "organisation",
@@ -39,6 +40,7 @@ func Test_buildDownloadUrl(t *testing.T) {
 }
 
 func Test_buildRootItemUrl(t *testing.T) {
+	t.Parallel()
 	a := NewAzureClient()
 	u, err := a.buildRootItemUrl(&azureOptions{
 		organisation: "organisation",
@@ -56,6 +58,7 @@ func Test_buildRootItemUrl(t *testing.T) {
 }
 
 func Test_buildRefsUrl(t *testing.T) {
+	t.Parallel()
 	a := NewAzureClient()
 	u, err := a.buildRefsUrl(&azureOptions{
 		organisation: "organisation",
@@ -73,6 +76,7 @@ func Test_buildRefsUrl(t *testing.T) {
 }
 
 func Test_buildTreeUrl(t *testing.T) {
+	t.Parallel()
 	a := NewAzureClient()
 	u, err := a.buildTreeUrl(&azureOptions{
 		organisation: "organisation",
@@ -90,6 +94,7 @@ func Test_buildTreeUrl(t *testing.T) {
 }
 
 func Test_parseAzureUrl(t *testing.T) {
+	t.Parallel()
 	type args struct {
 		url string
 	}
@@ -205,6 +210,7 @@ func Test_parseAzureUrl(t *testing.T) {
 }
 
 func Test_isAzureUrl(t *testing.T) {
+	t.Parallel()
 	type args struct {
 		s string
 	}
@@ -243,6 +249,7 @@ func Test_isAzureUrl(t *testing.T) {
 }
 
 func Test_azureDownloader_downloadZipFromAzureDevOps(t *testing.T) {
+	t.Parallel()
 	fips.InitFIPS(false)
 
 	type args struct {
@@ -319,6 +326,7 @@ func Test_azureDownloader_downloadZipFromAzureDevOps(t *testing.T) {
 }
 
 func Test_azureDownloader_latestCommitID(t *testing.T) {
+	t.Parallel()
 	fips.InitFIPS(false)
 
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
@@ -399,6 +407,7 @@ func (t *testRepoManager) ListFiles(_ context.Context, _ bool, _ *git.CloneOptio
 }
 
 func Test_cloneRepository_azure(t *testing.T) {
+	t.Parallel()
 	tests := []struct {
 		name   string
 		url    string
@@ -438,6 +447,7 @@ func Test_cloneRepository_azure(t *testing.T) {
 }
 
 func Test_listRefs_azure(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	client := NewAzureClient()
@@ -532,6 +542,7 @@ func Test_listRefs_azure(t *testing.T) {
 }
 
 func Test_listFiles_azure(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	client := NewAzureClient()

api/git/git_integration_test.go

@@ -18,6 +18,7 @@ const (
 )
 
 func TestService_ClonePrivateRepository_GitHub(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	accessToken := getRequiredValue(t, "GITHUB_PAT")
@@ -41,6 +42,7 @@ func TestService_ClonePrivateRepository_GitHub(t *testing.T) {
 }
 
 func TestService_LatestCommitID_GitHub(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	accessToken := getRequiredValue(t, "GITHUB_PAT")
@@ -61,6 +63,7 @@ func TestService_LatestCommitID_GitHub(t *testing.T) {
 }
 
 func TestService_ListRefs_GitHub(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	accessToken := getRequiredValue(t, "GITHUB_PAT")
@@ -74,6 +77,7 @@ func TestService_ListRefs_GitHub(t *testing.T) {
 }
 
 func TestService_ListRefs_Github_Concurrently(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	accessToken := getRequiredValue(t, "GITHUB_PAT")
@@ -92,6 +96,7 @@ func TestService_ListRefs_Github_Concurrently(t *testing.T) {
 }
 
 func TestService_ListFiles_GitHub(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	type args struct {
@@ -244,6 +249,7 @@ func TestService_ListFiles_GitHub(t *testing.T) {
 }
 
 func TestService_ListFiles_Github_Concurrently(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	repositoryUrl := privateGitRepoURL
@@ -282,6 +288,7 @@ func TestService_ListFiles_Github_Concurrently(t *testing.T) {
 }
 
 func TestService_purgeCache_Github(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	repositoryUrl := privateGitRepoURL
@@ -314,6 +321,7 @@ func TestService_purgeCache_Github(t *testing.T) {
 }
 
 func TestService_purgeCacheByTTL_Github(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	timeout := 100 * time.Millisecond
@@ -347,6 +355,7 @@ func TestService_purgeCacheByTTL_Github(t *testing.T) {
 }
 
 func TestService_HardRefresh_ListRefs_GitHub(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	accessToken := getRequiredValue(t, "GITHUB_PAT")
@@ -365,6 +374,7 @@ func TestService_HardRefresh_ListRefs_GitHub(t *testing.T) {
 }
 
 func TestService_HardRefresh_ListRefs_And_RemoveAllCaches_GitHub(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	accessToken := getRequiredValue(t, "GITHUB_PAT")
@@ -419,6 +429,7 @@ func TestService_HardRefresh_ListRefs_And_RemoveAllCaches_GitHub(t *testing.T) {
 }
 
 func TestService_HardRefresh_ListFiles_GitHub(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	service := newService(t.Context(), 2, 0)
@@ -456,6 +467,7 @@ func TestService_HardRefresh_ListFiles_GitHub(t *testing.T) {
 }
 
 func TestService_CloneRepository_TokenAuth(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	service := newService(t.Context(), 2, 0)

api/git/git_test.go

@@ -34,6 +34,7 @@ func setup(t *testing.T) string {
 }
 
 func Test_checkGitError(t *testing.T) {
+	t.Parallel()
 	tests := []struct {
 		name     string
 		err      error
@@ -70,6 +71,7 @@ func Test_checkGitError(t *testing.T) {
 }
 
 func Test_ClonePublicRepository_Shallow(t *testing.T) {
+	t.Parallel()
 	service := Service{git: NewGitClient(true)} // no need for http client since the test access the repo via file system.
 	repositoryURL := setup(t)
 	referenceName := "refs/heads/main"
@@ -82,6 +84,7 @@ func Test_ClonePublicRepository_Shallow(t *testing.T) {
 }
 
 func Test_ClonePublicRepository_NoGitDirectory(t *testing.T) {
+	t.Parallel()
 	service := Service{git: NewGitClient(false)} // no need for http client since the test access the repo via file system.
 	repositoryURL := setup(t)
 	referenceName := "refs/heads/main"
@@ -94,6 +97,7 @@ func Test_ClonePublicRepository_NoGitDirectory(t *testing.T) {
 }
 
 func Test_latestCommitID(t *testing.T) {
+	t.Parallel()
 	service := Service{git: NewGitClient(true)} // no need for http client since the test access the repo via file system.
 
 	repositoryURL := setup(t)
@@ -106,6 +110,7 @@ func Test_latestCommitID(t *testing.T) {
 }
 
 func Test_ListRefs(t *testing.T) {
+	t.Parallel()
 	service := Service{git: NewGitClient(true)}
 
 	repositoryURL := setup(t)
@@ -117,6 +122,7 @@ func Test_ListRefs(t *testing.T) {
 }
 
 func Test_ListFiles(t *testing.T) {
+	t.Parallel()
 	service := Service{git: NewGitClient(true)}
 
 	repositoryURL := setup(t)
@@ -161,6 +167,7 @@ func getCommitHistoryLength(t *testing.T, dir string) int {
 }
 
 func Test_listRefsPrivateRepository(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	accessToken := getRequiredValue(t, "GITHUB_PAT")
@@ -255,6 +262,7 @@ func Test_listRefsPrivateRepository(t *testing.T) {
 }
 
 func Test_listFilesPrivateRepository(t *testing.T) {
+	t.Parallel()
 	ensureIntegrationTest(t)
 
 	client := NewGitClient(false)

api/git/update/validate_test.go

@@ -8,6 +8,7 @@ import (
 )
 
 func Test_ValidateAutoUpdate(t *testing.T) {
+	t.Parallel()
 	tests := []struct {
 		name    string
 		value   *portainer.AutoUpdateSettings

api/hostmanagement/openamt/openamt_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestNewService(t *testing.T) {
+	t.Parallel()
 	fips.InitFIPS(false)
 
 	service := NewService(true)

api/http/client/client_test.go

@@ -12,6 +12,7 @@ import (
 )
 
 func TestExecutePingOperationFailure(t *testing.T) {
+	t.Parallel()
 	fips.InitFIPS(false)
 
 	host := "http://localhost:1"
@@ -36,6 +37,7 @@ func TestExecutePingOperationFailure(t *testing.T) {
 }
 
 func TestPingOperation(t *testing.T) {
+	t.Parallel()
 	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		w.Header().Add(portainer.PortainerAgentHeader, "1")
 	}))

api/http/handler/auth/logout_test.go

@@ -31,6 +31,7 @@ func (*mockBouncer) CookieAuthLookup(r *http.Request) (*portainer.TokenData, err
 }
 
 func TestLogout(t *testing.T) {
+	t.Parallel()
 	h := NewHandler(NewMockBouncer(), nil, nil, nil)
 	h.KubernetesTokenCacheManager = kubernetes.NewTokenCacheManager()
 	k, err := cli.NewClientFactory(nil, nil, nil, "", "", "")
@@ -45,6 +46,7 @@ func TestLogout(t *testing.T) {
 }
 
 func TestLogoutNoPanic(t *testing.T) {
+	t.Parallel()
 	h := NewHandler(testhelpers.NewTestRequestBouncer(), nil, nil, nil)
 
 	rr := httptest.NewRecorder()

api/http/handler/customtemplates/customtemplate_file_test.go

@@ -18,6 +18,7 @@ import (
 )
 
 func TestCustomTemplateFile(t *testing.T) {
+	t.Parallel()
 	_, ds := datastore.MustNewTestStore(t, true, false)
 	require.NotNil(t, ds)
 

api/http/handler/customtemplates/customtemplate_git_fetch_test.go

@@ -155,6 +155,7 @@ func singleAPIRequest(h *Handler, jwt string, expect string) error {
 }
 
 func Test_customTemplateGitFetch(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	_, store := datastore.MustNewTestStore(t, true, true)

api/http/handler/customtemplates/customtemplate_inspect_test.go

@@ -18,6 +18,7 @@ import (
 )
 
 func TestInspectHandler(t *testing.T) {
+	t.Parallel()
 	_, ds := datastore.MustNewTestStore(t, true, false)
 	require.NotNil(t, ds)
 

api/http/handler/docker/utils/get_stacks_test.go

@@ -16,6 +16,7 @@ import (
 )
 
 func TestHandler_getDockerStacks(t *testing.T) {
+	t.Parallel()
 	is := require.New(t)
 
 	environment := &portainer.Endpoint{

api/http/handler/edgegroups/edgegroup_create_test.go

@@ -16,6 +16,7 @@ import (
 )
 
 func TestEdgeGroupCreateHandler(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())
@@ -62,6 +63,7 @@ func TestEdgeGroupCreateHandler(t *testing.T) {
 }
 
 func TestEdgeGroupCreatePanic(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())

api/http/handler/edgegroups/edgegroup_inspect_test.go

@@ -17,6 +17,7 @@ import (
 )
 
 func TestEdgeGroupInspectHandler(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())
@@ -70,6 +71,7 @@ func TestEdgeGroupInspectHandler(t *testing.T) {
 }
 
 func TestEmptyEdgeGroupInspectHandler(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())
@@ -109,6 +111,7 @@ func TestEmptyEdgeGroupInspectHandler(t *testing.T) {
 }
 
 func TestDynamicEdgeGroupInspectHandler(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())
@@ -176,6 +179,7 @@ func TestDynamicEdgeGroupInspectHandler(t *testing.T) {
 }
 
 func TestEdgeGroupInspectPanic(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())

api/http/handler/edgegroups/edgegroup_list_test.go

@@ -17,6 +17,7 @@ import (
 )
 
 func Test_getEndpointTypes(t *testing.T) {
+	t.Parallel()
 	endpoints := []portainer.Endpoint{
 		{ID: 1, Type: portainer.DockerEnvironment},
 		{ID: 2, Type: portainer.AgentOnDockerEnvironment},
@@ -54,6 +55,7 @@ func Test_getEndpointTypes(t *testing.T) {
 }
 
 func Test_getEndpointTypes_failWhenEndpointDontExist(t *testing.T) {
+	t.Parallel()
 	datastore := testhelpers.NewDatastore(testhelpers.WithEndpoints([]portainer.Endpoint{}))
 
 	_, err := getEndpointTypes(datastore, roar.FromSlice([]portainer.EndpointID{1}))
@@ -61,6 +63,7 @@ func Test_getEndpointTypes_failWhenEndpointDontExist(t *testing.T) {
 }
 
 func TestEdgeGroupListHandler(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())

api/http/handler/edgegroups/edgegroup_update_test.go

@@ -17,6 +17,7 @@ import (
 )
 
 func TestEdgeGroupUpdateHandler(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())
@@ -70,6 +71,7 @@ func TestEdgeGroupUpdateHandler(t *testing.T) {
 }
 
 func TestEdgeGroupUpdatePanic(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())

api/http/handler/edgejobs/edgejob_create_test.go

@@ -70,6 +70,7 @@ func initStore(t *testing.T) *datastore.Store {
 }
 
 func Test_edgeJobCreate_StringMethod_Success(t *testing.T) {
+	t.Parallel()
 	store := initStore(t)
 
 	fileService := &mockFileService{}
@@ -113,6 +114,7 @@ func Test_edgeJobCreate_StringMethod_Success(t *testing.T) {
 }
 
 func Test_edgeJobCreate_FileMethod_Success(t *testing.T) {
+	t.Parallel()
 	store := initStore(t)
 
 	fileService := &mockFileService{}

api/http/handler/edgejobs/edgejob_tasks_list_test.go

@@ -17,6 +17,7 @@ import (
 )
 
 func Test_EdgeJobTasksListHandler(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, true, false)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())

api/http/handler/edgestacks/edgestack_create_test.go

@@ -16,6 +16,7 @@ import (
 
 // Create
 func TestCreateAndInspect(t *testing.T) {
+	t.Parallel()
 	handler, rawAPIKey := setupHandler(t)
 
 	// Create Endpoint, EdgeGroup and EndpointRelation
@@ -90,6 +91,7 @@ func TestCreateAndInspect(t *testing.T) {
 }
 
 func TestCreateWithInvalidPayload(t *testing.T) {
+	t.Parallel()
 	handler, rawAPIKey := setupHandler(t)
 
 	endpoint := createEndpoint(t, handler.DataStore)

api/http/handler/edgestacks/edgestack_delete_test.go

@@ -16,6 +16,7 @@ import (
 
 // Delete
 func TestDeleteAndInspect(t *testing.T) {
+	t.Parallel()
 	handler, rawAPIKey := setupHandler(t)
 
 	// Create
@@ -68,6 +69,7 @@ func TestDeleteAndInspect(t *testing.T) {
 }
 
 func TestDeleteInvalidEdgeStack(t *testing.T) {
+	t.Parallel()
 	handler, rawAPIKey := setupHandler(t)
 
 	cases := []struct {
@@ -98,6 +100,7 @@ func TestDeleteInvalidEdgeStack(t *testing.T) {
 }
 
 func TestDeleteEdgeStack_RemoveProjectFolder(t *testing.T) {
+	t.Parallel()
 	handler, rawAPIKey := setupHandler(t)
 
 	edgeGroup := createEdgeGroup(t, handler.DataStore)

api/http/handler/edgestacks/edgestack_inspect_test.go

@@ -8,6 +8,7 @@ import (
 
 // Inspect
 func TestInspectInvalidEdgeID(t *testing.T) {
+	t.Parallel()
 	handler, rawAPIKey := setupHandler(t)
 
 	cases := []struct {

api/http/handler/edgestacks/edgestack_status_update_test.go

@@ -15,6 +15,7 @@ import (
 
 // Update Status
 func TestUpdateStatusAndInspect(t *testing.T) {
+	t.Parallel()
 	handler, rawAPIKey := setupHandler(t)
 
 	endpoint := createEndpoint(t, handler.DataStore)
@@ -78,6 +79,7 @@ func TestUpdateStatusAndInspect(t *testing.T) {
 }
 
 func TestUpdateStatusWithInvalidPayload(t *testing.T) {
+	t.Parallel()
 	handler, _ := setupHandler(t)
 
 	endpoint := createEndpoint(t, handler.DataStore)

api/http/handler/edgestacks/edgestack_update_test.go

@@ -17,6 +17,7 @@ import (
 
 // Update
 func TestUpdateAndInspect(t *testing.T) {
+	t.Parallel()
 	handler, rawAPIKey := setupHandler(t)
 
 	endpoint := createEndpoint(t, handler.DataStore)
@@ -103,6 +104,7 @@ func TestUpdateAndInspect(t *testing.T) {
 }
 
 func TestUpdateWithInvalidEdgeGroups(t *testing.T) {
+	t.Parallel()
 	handler, rawAPIKey := setupHandler(t)
 
 	endpoint := createEndpoint(t, handler.DataStore)
@@ -182,6 +184,7 @@ func TestUpdateWithInvalidEdgeGroups(t *testing.T) {
 }
 
 func TestUpdateWithInvalidPayload(t *testing.T) {
+	t.Parallel()
 	handler, rawAPIKey := setupHandler(t)
 
 	endpoint := createEndpoint(t, handler.DataStore)

api/http/handler/edgestacks/endpoints_test.go

@@ -11,6 +11,7 @@ import (
 )
 
 func Test_hasKubeEndpoint(t *testing.T) {
+	t.Parallel()
 	endpoints := []portainer.Endpoint{
 		{ID: 1, Type: portainer.DockerEnvironment},
 		{ID: 2, Type: portainer.AgentOnDockerEnvironment},
@@ -49,6 +50,7 @@ func Test_hasKubeEndpoint(t *testing.T) {
 }
 
 func Test_hasKubeEndpoint_failWhenEndpointDontExist(t *testing.T) {
+	t.Parallel()
 	datastore := testhelpers.NewDatastore(testhelpers.WithEndpoints([]portainer.Endpoint{}))
 
 	_, err := hasKubeEndpoint(datastore.Endpoint(), []portainer.EndpointID{1})
@@ -56,6 +58,7 @@ func Test_hasKubeEndpoint_failWhenEndpointDontExist(t *testing.T) {
 }
 
 func Test_hasDockerEndpoint(t *testing.T) {
+	t.Parallel()
 	endpoints := []portainer.Endpoint{
 		{ID: 1, Type: portainer.DockerEnvironment},
 		{ID: 2, Type: portainer.AgentOnDockerEnvironment},
@@ -94,6 +97,7 @@ func Test_hasDockerEndpoint(t *testing.T) {
 }
 
 func Test_hasDockerEndpoint_failWhenEndpointDontExist(t *testing.T) {
+	t.Parallel()
 	datastore := testhelpers.NewDatastore(testhelpers.WithEndpoints([]portainer.Endpoint{}))
 
 	_, err := hasDockerEndpoint(datastore.Endpoint(), []portainer.EndpointID{1})

api/http/handler/endpointedge/endpointedge_job_logs_test.go

@@ -11,6 +11,7 @@ import (
 )
 
 func TestUpdateUnrelatedEdgeJobLogs(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, false)
 
 	h := &Handler{DataStore: store}

api/http/handler/endpointedge/endpointedge_status_inspect_test.go

@@ -128,6 +128,7 @@ func createEndpoint(handler *Handler, endpoint portainer.Endpoint, endpointRelat
 }
 
 func TestMissingEdgeIdentifier(t *testing.T) {
+	t.Parallel()
 	handler := mustSetupHandler(t)
 	endpointID := portainer.EndpointID(45)
 
@@ -155,6 +156,7 @@ func TestMissingEdgeIdentifier(t *testing.T) {
 }
 
 func TestWithEndpoints(t *testing.T) {
+	t.Parallel()
 	handler := mustSetupHandler(t)
 
 	for _, test := range endpointTestCases {
@@ -181,6 +183,7 @@ func TestWithEndpoints(t *testing.T) {
 }
 
 func TestLastCheckInDateIncreases(t *testing.T) {
+	t.Parallel()
 	synctest.Test(t, testLastCheckInDateIncreases)
 }
 
@@ -231,6 +234,7 @@ func testLastCheckInDateIncreases(t *testing.T) {
 }
 
 func TestEmptyEdgeIdWithAgentPlatformHeader(t *testing.T) {
+	t.Parallel()
 	handler := mustSetupHandler(t)
 
 	endpointID := portainer.EndpointID(44)
@@ -274,6 +278,7 @@ func TestEmptyEdgeIdWithAgentPlatformHeader(t *testing.T) {
 }
 
 func TestEdgeStackStatus(t *testing.T) {
+	t.Parallel()
 	handler := mustSetupHandler(t)
 
 	endpointID := portainer.EndpointID(7)
@@ -339,6 +344,7 @@ func TestEdgeStackStatus(t *testing.T) {
 }
 
 func TestEdgeJobsResponse(t *testing.T) {
+	t.Parallel()
 	handler := mustSetupHandler(t)
 
 	localCreateEndpoint := func(endpointID portainer.EndpointID, tagIDs []portainer.TagID) *portainer.Endpoint {

api/http/handler/endpoints/endpoint_create_global_key_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestEmptyGlobalKey(t *testing.T) {
+	t.Parallel()
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())
 
 	req, err := http.NewRequest(http.MethodPost, "https://portainer.io:9443/endpoints/global-key", nil)

api/http/handler/endpoints/endpoint_create_test.go

@@ -17,6 +17,7 @@ import (
 // EE-only kubeconfig validation tests removed for CE
 
 func TestSaveEndpointAndUpdateAuthorizations(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, true, false)
 
 	endpointGroup := &portainer.EndpointGroup{
@@ -93,6 +94,7 @@ func TestSaveEndpointAndUpdateAuthorizations(t *testing.T) {
 }
 
 func TestCreateEndpointFailure(t *testing.T) {
+	t.Parallel()
 	fips.InitFIPS(false)
 
 	_, store := datastore.MustNewTestStore(t, true, false)
@@ -115,6 +117,7 @@ func TestCreateEndpointFailure(t *testing.T) {
 }
 
 func TestCreateEdgeAgentEndpoint_ContainerEngineMapping(t *testing.T) {
+	t.Parallel()
 	fips.InitFIPS(false)
 
 	_, store := datastore.MustNewTestStore(t, true, false)

api/http/handler/endpoints/endpoint_delete_test.go

@@ -15,6 +15,7 @@ import (
 )
 
 func TestEndpointDeleteEdgeGroupsConcurrently(t *testing.T) {
+	t.Parallel()
 	const endpointsCount = 100
 
 	_, store := datastore.MustNewTestStore(t, true, false)

api/http/handler/endpoints/endpoint_list_test.go

@@ -25,6 +25,7 @@ type endpointListTest struct {
 }
 
 func Test_EndpointList_AgentVersion(t *testing.T) {
+	t.Parallel()
 	version1Endpoint := portainer.Endpoint{
 		ID:      1,
 		GroupID: 1,
@@ -107,6 +108,7 @@ func Test_EndpointList_AgentVersion(t *testing.T) {
 }
 
 func Test_endpointList_edgeFilter(t *testing.T) {
+	t.Parallel()
 	trustedEdgeAsync := portainer.Endpoint{ID: 1, UserTrusted: true, Edge: portainer.EnvironmentEdgeSettings{AsyncMode: true}, GroupID: 1, Type: portainer.EdgeAgentOnDockerEnvironment}
 	untrustedEdgeAsync := portainer.Endpoint{ID: 2, UserTrusted: false, Edge: portainer.EnvironmentEdgeSettings{AsyncMode: true}, GroupID: 1, Type: portainer.EdgeAgentOnDockerEnvironment}
 	regularUntrustedEdgeStandard := portainer.Endpoint{ID: 3, UserTrusted: false, Edge: portainer.EnvironmentEdgeSettings{AsyncMode: false}, GroupID: 1, Type: portainer.EdgeAgentOnDockerEnvironment}

api/http/handler/endpoints/endpoint_registry_access_test.go

@@ -58,6 +58,7 @@ func (s *spyKubeClient) RemoveImagePullSecretFromServiceAccount(namespace, _, _
 var testRegistry = &portainer.Registry{ID: 3, URL: "registry.example.com"}
 
 func TestApplyKubeRegistryAccess_Grant(t *testing.T) {
+	t.Parallel()
 	t.Run("single namespace granted creates secret then patches SA", func(t *testing.T) {
 		spy := newSpyKubeClient()
 		err := applyKubeRegistryAccess(spy, testRegistry, nil, []string{"ns-a"})
@@ -96,6 +97,7 @@ func TestApplyKubeRegistryAccess_Grant(t *testing.T) {
 }
 
 func TestApplyKubeRegistryAccess_Revoke(t *testing.T) {
+	t.Parallel()
 	t.Run("single namespace revoked removes from SA then deletes secret", func(t *testing.T) {
 		spy := newSpyKubeClient()
 		err := applyKubeRegistryAccess(spy, testRegistry, []string{"ns-a"}, nil)
@@ -134,6 +136,7 @@ func TestApplyKubeRegistryAccess_Revoke(t *testing.T) {
 }
 
 func TestApplyKubeRegistryAccess_Mixed(t *testing.T) {
+	t.Parallel()
 	t.Run("one namespace added and one removed in same call", func(t *testing.T) {
 		spy := newSpyKubeClient()
 		err := applyKubeRegistryAccess(spy, testRegistry, []string{"ns-old"}, []string{"ns-new"})

api/http/handler/endpoints/endpoint_snapshots_test.go

@@ -18,6 +18,7 @@ import (
 )
 
 func Test_endpointSnapshots(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	endpointID := portainer.EndpointID(123)

api/http/handler/endpoints/filter_test.go

@@ -23,6 +23,7 @@ type filterTest struct {
 }
 
 func Test_Filter_AgentVersion(t *testing.T) {
+	t.Parallel()
 	version1Endpoint := portainer.Endpoint{ID: 1, GroupID: 1,
 		Type: portainer.AgentOnDockerEnvironment,
 		Agent: struct {
@@ -78,6 +79,7 @@ func Test_Filter_AgentVersion(t *testing.T) {
 }
 
 func Test_Filter_edgeFilter(t *testing.T) {
+	t.Parallel()
 	trustedEdgeAsync := portainer.Endpoint{ID: 1, UserTrusted: true, Edge: portainer.EnvironmentEdgeSettings{AsyncMode: true}, GroupID: 1, Type: portainer.EdgeAgentOnDockerEnvironment}
 	untrustedEdgeAsync := portainer.Endpoint{ID: 2, UserTrusted: false, Edge: portainer.EnvironmentEdgeSettings{AsyncMode: true}, GroupID: 1, Type: portainer.EdgeAgentOnDockerEnvironment}
 	regularUntrustedEdgeStandard := portainer.Endpoint{ID: 3, UserTrusted: false, Edge: portainer.EnvironmentEdgeSettings{AsyncMode: false}, GroupID: 1, Type: portainer.EdgeAgentOnDockerEnvironment}
@@ -130,6 +132,7 @@ func Test_Filter_edgeFilter(t *testing.T) {
 }
 
 func Test_Filter_excludeIDs(t *testing.T) {
+	t.Parallel()
 	ids := []portainer.EndpointID{1, 2, 3, 4, 5, 6, 7, 8, 9}
 
 	environments := slicesx.Map(ids, func(id portainer.EndpointID) portainer.Endpoint {
@@ -152,6 +155,7 @@ func Test_Filter_excludeIDs(t *testing.T) {
 }
 
 func Test_Filter_excludeGroupIDs(t *testing.T) {
+	t.Parallel()
 	groupA := portainer.EndpointGroupID(10)
 	groupB := portainer.EndpointGroupID(20)
 	groupC := portainer.EndpointGroupID(30)
@@ -335,6 +339,7 @@ func setupFilterTest(t *testing.T, endpoints []portainer.Endpoint) *Handler {
 }
 
 func TestFilterEndpointsByEdgeStack(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, false)
 
 	endpoints := []portainer.Endpoint{
@@ -403,6 +408,7 @@ func TestFilterEndpointsByEdgeStack(t *testing.T) {
 }
 
 func TestErrorsFilterEndpointsByEdgeStack(t *testing.T) {
+	t.Parallel()
 	t.Run("must error by edge stack not found", func(t *testing.T) {
 		_, store := datastore.MustNewTestStore(t, false, false)
 		require.NotNil(t, store)
@@ -438,6 +444,7 @@ func TestErrorsFilterEndpointsByEdgeStack(t *testing.T) {
 }
 
 func TestFilterEndpointsByEdgeGroup(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, false)
 
 	endpoints := []portainer.Endpoint{
@@ -479,6 +486,7 @@ func TestFilterEndpointsByEdgeGroup(t *testing.T) {
 }
 
 func TestFilterEndpointsByExcludeEdgeGroupIDs(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, false)
 
 	endpoints := []portainer.Endpoint{
@@ -520,6 +528,7 @@ func TestFilterEndpointsByExcludeEdgeGroupIDs(t *testing.T) {
 }
 
 func TestGetShortestAsyncInterval(t *testing.T) {
+	t.Parallel()
 	endpoint := &portainer.Endpoint{
 		ID:   1,
 		Name: "Test Endpoint",

api/http/handler/endpoints/sort_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestSortEndpointsByField(t *testing.T) {
+	t.Parallel()
 	environments := []portainer.Endpoint{
 		{ID: 0, Name: "Environment 1", GroupID: 1, Status: 1, LastCheckInDate: 3, EdgeID: "edge32"},
 		{ID: 1, Name: "Environment 2", GroupID: 2, Status: 2, LastCheckInDate: 6, EdgeID: "edge57"},

api/http/handler/endpoints/utils_update_edge_groups_test.go

@@ -12,6 +12,7 @@ import (
 )
 
 func Test_updateEdgeGroups(t *testing.T) {
+	t.Parallel()
 	createGroups := func(store *datastore.Store, names []string) ([]portainer.EdgeGroup, error) {
 		groups := make([]portainer.EdgeGroup, len(names))
 		for index, name := range names {

api/http/handler/endpoints/utils_update_tags_test.go

@@ -12,6 +12,7 @@ import (
 )
 
 func Test_updateTags(t *testing.T) {
+	t.Parallel()
 	createTags := func(store *datastore.Store, tagNames []string) ([]portainer.Tag, error) {
 		tags := make([]portainer.Tag, len(tagNames))
 		for index, tagName := range tagNames {

api/http/handler/file/handler_test.go

@@ -10,6 +10,7 @@ import (
 )
 
 func TestNormalServe(t *testing.T) {
+	t.Parallel()
 	handler := file.NewHandler("", false, func() bool { return false })
 	require.NotNil(t, handler)
 
@@ -32,6 +33,7 @@ func TestNormalServe(t *testing.T) {
 }
 
 func TestPermissionsPolicyHeader(t *testing.T) {
+	t.Parallel()
 	handler := file.NewHandler("", false, func() bool { return false })
 	require.NotNil(t, handler)
 
@@ -50,6 +52,7 @@ func TestPermissionsPolicyHeader(t *testing.T) {
 }
 
 func TestRedirectInstanceDisabled(t *testing.T) {
+	t.Parallel()
 	handler := file.NewHandler("", false, func() bool { return true })
 	require.NotNil(t, handler)
 

api/http/handler/kubernetes/config_test.go

@@ -8,6 +8,7 @@ import (
 )
 
 func TestIsSelfSignedCertificate(t *testing.T) {
+	t.Parallel()
 
 	tc := []struct {
 		name     string

api/http/handler/kubernetes/event_test.go

@@ -22,6 +22,7 @@ import (
 // Currently this test just tests the HTTP Handler is setup correctly, in the future we should move the ClientFactory to a mock in order
 // test the logic in event.go
 func TestGetKubernetesEvents(t *testing.T) {
+	t.Parallel()
 	is := assert.New(t)
 
 	srv := httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {

api/http/handler/kubernetes/service_accounts_test.go

@@ -85,6 +85,7 @@ func newServiceAccountRequest(t *testing.T, method, path string, body []byte, u
 }
 
 func TestDeleteKubernetesServiceAccounts_ValidPayload(t *testing.T) {
+	t.Parallel()
 	handler, u, tk := newServiceAccountTestHandler(t)
 
 	payload := models.K8sServiceAccountDeleteRequests{
@@ -102,6 +103,7 @@ func TestDeleteKubernetesServiceAccounts_ValidPayload(t *testing.T) {
 }
 
 func TestDeleteKubernetesServiceAccounts_InvalidPayload(t *testing.T) {
+	t.Parallel()
 	handler, u, tk := newServiceAccountTestHandler(t)
 
 	payload := models.K8sServiceAccountDeleteRequests{}
@@ -120,6 +122,7 @@ func TestDeleteKubernetesServiceAccounts_InvalidPayload(t *testing.T) {
 }
 
 func TestDeleteKubernetesServiceAccounts_EmptyNamespace(t *testing.T) {
+	t.Parallel()
 	handler, u, tk := newServiceAccountTestHandler(t)
 
 	payload := models.K8sServiceAccountDeleteRequests{

api/http/handler/registries/registry_access_test.go

@@ -16,6 +16,7 @@ import (
 )
 
 func Test_RegistryAccess_RequiresAuthentication(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 	registry := &portainer.Registry{
 		ID:   1,
@@ -37,6 +38,7 @@ func Test_RegistryAccess_RequiresAuthentication(t *testing.T) {
 }
 
 func Test_RegistryAccess_InvalidRegistryID(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 	user := &portainer.User{ID: 1, Username: "test", Role: portainer.StandardUserRole}
 	err := store.User().Create(user)
@@ -57,6 +59,7 @@ func Test_RegistryAccess_InvalidRegistryID(t *testing.T) {
 }
 
 func Test_RegistryAccess_RegistryNotFound(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	user := &portainer.User{ID: 1, Username: "test", Role: portainer.StandardUserRole}

api/http/handler/registries/registry_configure_test.go

@@ -50,6 +50,7 @@ func newConfigureRequest(t *testing.T, tls bool, skipVerify bool, includeCert bo
 }
 
 func Test_registryConfigurePayload_Validate_TLSBundleRules(t *testing.T) {
+	t.Parallel()
 	// passes when all three are uploaded
 	{
 		req := newConfigureRequest(t, true, false, true, true, true)

api/http/handler/registries/registry_create_test.go

@@ -17,6 +17,7 @@ import (
 )
 
 func Test_registryCreatePayload_Validate(t *testing.T) {
+	t.Parallel()
 	basePayload := registryCreatePayload{Name: "Test registry", URL: "http://example.com"}
 	t.Run("Can't create a ProGet registry if BaseURL is empty", func(t *testing.T) {
 		payload := basePayload
@@ -54,6 +55,7 @@ func Test_registryCreatePayload_Validate(t *testing.T) {
 }
 
 func TestHandler_registryCreate(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, false)
 
 	payload := registryCreatePayload{

api/http/handler/registries/registry_delete_test.go

@@ -48,6 +48,7 @@ func (s *deleteSpyKubeClient) RemoveImagePullSecretFromServiceAccount(namespace,
 // --- cleanupRegistryFromNamespaces unit tests ---
 
 func TestCleanupRegistryFromNamespaces(t *testing.T) {
+	t.Parallel()
 	const registryID portainer.RegistryID = 3
 	const endpointID portainer.EndpointID = 1
 
@@ -98,6 +99,7 @@ func TestCleanupRegistryFromNamespaces(t *testing.T) {
 // --- deleteKubernetesSecrets integration tests ---
 
 func TestDeleteKubernetesSecrets(t *testing.T) {
+	t.Parallel()
 	const registryID portainer.RegistryID = 3
 	const endpointID portainer.EndpointID = 1
 

api/http/handler/registries/registry_ping_test.go

@@ -20,6 +20,7 @@ import (
 )
 
 func Test_categorizeRegistryError(t *testing.T) {
+	t.Parallel()
 	tests := []struct {
 		name        string
 		err         error
@@ -109,6 +110,7 @@ func Test_categorizeRegistryError(t *testing.T) {
 }
 
 func Test_registryPingPayload_Validate(t *testing.T) {
+	t.Parallel()
 	tests := []struct {
 		name    string
 		payload registryPingPayload
@@ -187,6 +189,7 @@ func Test_registryPingPayload_Validate(t *testing.T) {
 }
 
 func TestHandler_pingRegistry(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, false)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())
@@ -289,6 +292,7 @@ func TestHandler_pingRegistry(t *testing.T) {
 }
 
 func TestHandler_pingRegistry_DockerHubURL(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, false)
 
 	handler := NewHandler(testhelpers.NewTestRequestBouncer())

api/http/handler/registries/registry_update_test.go

@@ -17,6 +17,7 @@ import (
 )
 
 func TestHandler_registryUpdate(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, false)
 
 	registry := &portainer.Registry{Type: portainer.ProGetRegistry}

api/http/handler/stacks/stack_file_test.go

@@ -20,6 +20,7 @@ import (
 )
 
 func TestStackFile_GitPendingRedeploy_Returns409(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	_, err := mockCreateUser(store)
@@ -63,6 +64,7 @@ func TestStackFile_GitPendingRedeploy_Returns409(t *testing.T) {
 }
 
 func TestStackFile_MatchingGitSettings_ReturnsFileContent(t *testing.T) {
+	t.Parallel()
 	_, store := datastore.MustNewTestStore(t, false, true)
 
 	_, err := mockCreateUser(store)