RHOAI — Deployment Config and Cross-Cluster Endpoint (issue 16 of 29)

Labels: ready-to-code
Depends on: Issue 1 (#4039 shared infra CA/credential utils), Issue 15 (#TBD MCP catalog provider)
RHIDP Stories: RHIDP-15323
Feature: RHDHPLAN-1510 — Epic RHIDP-15314

Implement deployment configuration for RHOAI connector: Zod config schema for ai-catalog.providers.rhoai.mcpCatalog, enable/disable toggle, K8s Secret loader for credentials, shared CA bundle integration, Secret refresh per reconciliation cycle (no credential caching), and startup logging with graceful error handling.

Tasks

From openspec/changes/rhoai-connector/tasks.md group 2 (RHIDP-15323):

• 2.1 Define Zod config schema for ai-catalog.providers.rhoai.mcpCatalog
• 2.2 Implement config validation in module startup
• 2.3 Implement enable/disable toggle
• 2.4 Implement K8s Secret loader utility
• 2.5 Integrate shared CA bundle utility from RHIDP-15316
• 2.6 Implement Secret refresh on each refresh() cycle
• 2.7 Implement CA bundle fallback to system CA
• 2.8 Add startup logging: enabled/disabled status, endpoint URL, Secret ref
• 2.9 Add error logging for missing/invalid config without crashing

Specifications

• openspec/changes/rhoai-connector/specs/deployment-config/spec.md

Start with openspec/changes/rhoai-connector/tasks.md and specs/deployment-config/spec.md, then review the shared infrastructure work in issue #4039 and the MCP catalog dependency. Implement and validate the configuration, toggle, Secret and CA handling, refresh behavior, and startup/error logging described in tasks 2.1–2.9 without caching credentials or crashing on invalid configuration.