amlint 0.1.0

Semantic linter for Prometheus Alertmanager configs

amlint

Semantic linter for Prometheus Alertmanager configs.

amtool check-config validates syntax. amlint validates semantics: will alerts actually reach a receiver, does the inhibition rule do anything, are there unreachable routing branches? These are the bugs that burn teams — config is valid, alerts silently vanish.

Why

Alertmanager configs are YAML routing trees with inhibition rules and receivers. The most painful mistakes are syntactically valid:

• route references a receiver that doesn't exist → alerts are dropped
• inhibition without equal → silences unrelated alerts, you think it's quiet, there's actually a fire
• catch-all branch before specific ones → specific branches are unreachable
• match_re that doesn't compile
• group_by that doesn't behave the way you think

amtool won't catch any of this. amlint will.

Install

pip install pyyaml
pip install -e .

Usage

amlint check alertmanager.yml
amlint check alertmanager.yml --strict   # WARN also exits non-zero
amlint check alertmanager.yml --format json

Example output:

  ERROR  Route references receiver 'pager-team' which is not defined in receivers. Alerts matched here will be dropped.
  ↳ route.routes[1]  [undefined-receiver]

  WARN   Catch-all route (no matchers) with continue:false will intercept all alerts — 2 subsequent sibling(s) are unreachable.
  ↳ route.routes[0]  [unreachable-route]

  2 error · 3 warn · 1 info

Exit code 1 on ERROR — ready for CI. --strict makes WARN block too.

CI example

# .github/workflows/lint.yml
- name: Lint Alertmanager config
  run: amlint check alertmanager.yml --strict

Checks

code	level	what it catches
undefined-receiver	error	route references a receiver that doesn't exist
bad-regex	error	match_re pattern fails to compile
no-root-route	error	no root route defined
inhibit-no-equal	warn	inhibition without equal silences too broadly
unreachable-route	warn	catch-all hides subsequent sibling routes
groupby-ellipsis	warn	... mixed with explicit labels in group_by
inhibit-same-match	info	source and target match the same label value
unused-receiver	info	receiver defined but not used in any route

Tests

python3 -m pytest test_linter.py -v

License

MIT