INFRA 43544: Add alert linting using mimirtool (#209)

* INFRA-43544: Add alert linting using mimirtool

* Update linting logic

* Update linting syntax

* Fix syntax errors

* Fix syntax error

* Move mimirtool under k8s

* Update the mimirtool targets

* Update the output messgaes

---------

Co-authored-by: Nivin Thomas <nthomas@mintel.com>

Author: nthomas91

modules/k8s/Makefile.mimirtool

@@ -0,0 +1,48 @@
+## Mimirtool helpers
+MANIFEST_DIRS:=$(shell find rendered/ -type d -name manifests 2>/dev/null)
+TEMP_ALERTS_DIR := /tmp/mimirtool-alerts
+
+.PHONY: k8s/mimirtool/check-env k8s/mimirtool/rules/lint k8s/mimirtool/clean
+
+# Check mimirtool environment is suitable
+k8s/mimirtool/check-env:
+	@if [ ! -d ./rendered ]; then \
+		echo "rendered manifests directory does not exist, run: make tanka/generate" ;\
+		exit 1 ;\
+	fi
+
+# Clean temporary files
+k8s/mimirtool/clean:
+	@rm -rf $(TEMP_ALERTS_DIR)
+
+## Validate PrometheusRule alerts
+k8s/mimirtool/rules/lint: satoshi/check-deps k8s/mimirtool/check-env k8s/mimirtool/clean
+	@mkdir -p $(TEMP_ALERTS_DIR)
+	@errs=0; \
+	for dir in $(MANIFEST_DIRS); do \
+		rulefiles=$$(find $${dir} -type f -name '*PrometheusRule*.yaml'); \
+		if [ ! -z "$${rulefiles}" ]; then \
+			echo "Validating PrometheusRules in $${dir}"; \
+			for rulefile in $${rulefiles}; do \
+				filename=$$(basename $${rulefile}); \
+				echo "  Checking $${rulefile}..."; \
+				if ! yq eval '.spec' $${rulefile} > $(TEMP_ALERTS_DIR)/$${filename}.spec.yaml; then \
+					echo "Failed to extract .spec from $${rulefile}"; \
+					errs=$$(( $$errs + 1 )); \
+					continue; \
+				fi; \
+				if ! mimirtool rules lint $(TEMP_ALERTS_DIR)/$${filename}.spec.yaml; then \
+					echo "Validation failed for $${rulefile}"; \
+					errs=$$(( $$errs + 1 )); \
+				else \
+					echo "Validation passed for $${rulefile}"; \
+				fi; \
+			done; \
+		fi; \
+	done; \
+	if [ "$${errs:-0}" -gt 0 ]; then \
+		echo "Validation failed with $${errs} error(s)"; \
+		exit 1; \
+	else \
+		echo "All checks passed"; \
+	fi

modules/satoshi/Makefile

@@ -4,7 +4,7 @@ S_YLW := $(shell tput setaf 3 2> /dev/null || true)
 S_RST := $(shell tput sgr0 2> /dev/null || true)
 S_BLD := $(shell tput bold 2> /dev/null || true)
 
-REQUIRED_SATOSHI_BINS := conftest helm jb jsonnet kubectl kustomize opa pluto tk yq
+REQUIRED_SATOSHI_BINS := conftest helm jb jsonnet kubectl kustomize opa pluto tk yq mimirtool
 
 .PHONY: satoshi/check-deps satoshi/check-asdf-dep satoshi/update-makefile satoshi/update-tools
 

modules/satoshi/k8s-tool-versions

@@ -43,6 +43,9 @@ kustomize 5.0.1
 #renovate: depName=kyverno/kyverno
 kyverno-cli 1.13.4
 
+#asdf:plugin add mimirtool https://github.com/asdf-community/asdf-mimirtool.git
+mimirtool 2.17.2
+
 #asdf:plugin add opa
 #renovate: depName=open-policy-agent/opa
 opa 0.68.0