feat(x2a): K8s jobs real implementation - framework + init (#2273)

* First draft: Real Job creation

* job template is able to git pull

* Working full init job including git

* After rebase

* init phase coomplete, skeleton for other phases

* With fixes tests, yarn full

* app-config reset

* rbac

* reverting aap and rbac to main

* fix: correct Artifact[] type after rebase conflict resolution

Changed Map<string, string[]> to Map<string, Artifact[]> in
listJobsForProject and listJobsForModule methods. Updated artifact
queries to select all fields and use mapRowToArtifact for proper
type mapping.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* code dulication

* prettier

* after review

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: elai-shalev

workspaces/x2a/app-config.yaml

@@ -120,6 +120,7 @@ permission:
     admin:
       users:
         - name: user:default/mareklibra
+        - name: user:default/elai-shalev
 
 # X2A Configuration
 x2a:
@@ -146,12 +147,12 @@ x2a:
     llm:
       # LLM_MODEL is required - defaults to anthropic.claude-v2 if not set
       LLM_MODEL: ${LLM_MODEL:-anthropic.claude-v2}
-      # Example for AWS Bedrock with IAM credentials:
-      AWS_REGION: ${AWS_REGION}
-      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
-      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
       # Example for AWS Bedrock with bearer token:
-      # AWS_BEARER_TOKEN_BEDROCK: ${AWS_BEARER_TOKEN_BEDROCK}
+      AWS_REGION: ${AWS_REGION}
+      AWS_BEARER_TOKEN_BEDROCK: ${AWS_BEARER_TOKEN_BEDROCK}
+      # Example for AWS Bedrock with IAM credentials:
+      #AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
+      #AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
       # Example for OpenAI:
       # OPENAI_API_KEY: ${OPENAI_API_KEY}
       # OPENAI_MODEL: ${OPENAI_MODEL}

workspaces/x2a/plugins/x2a-backend/config.d.ts

@@ -36,6 +36,12 @@ export interface X2AConfig {
       };
     };
   };
+  git?: {
+    author?: {
+      name: string;
+      email: string;
+    };
+  };
   credentials: {
     llm: Record<string, string>;
     aap?: {
@@ -94,6 +100,53 @@ export interface Config {
         };
       };
     };
+    /**
+     * Git configuration for X2A migrations
+     */
+    git?: {
+      /**
+       * Git commit author configuration for migration artifacts
+       * @visibility backend
+       */
+      author?: {
+        /**
+         * Git commit author name (e.g., "X2A Migration Bot")
+         * Default: "X2A Migration Bot"
+         * @visibility backend
+         */
+        name?: string;
+        /**
+         * Git commit author email (e.g., "x2a-bot@redhat.com")
+         * Default: "x2a-bot@redhat.com"
+         * @visibility backend
+         */
+        email?: string;
+      };
+      /**
+       * Source repository configuration
+       * @visibility backend
+       */
+      sourceRepo?: {
+        /**
+         * Fallback token for source repository authentication.
+         * Used when the UI doesn't provide a token in the /run request.
+         * @visibility secret
+         */
+        token?: string;
+      };
+      /**
+       * Target repository configuration
+       * @visibility backend
+       */
+      targetRepo?: {
+        /**
+         * Fallback token for target repository authentication.
+         * Used when the UI doesn't provide a token in the /run request.
+         * @visibility secret
+         */
+        token?: string;
+      };
+    };
     /**
      * Credentials configuration for X2A
      */

workspaces/x2a/plugins/x2a-backend/src/plugin.test.ts

@@ -118,6 +118,12 @@ const getX2aDatabaseServiceMock = (): typeof x2aDatabaseServiceRef.T => ({
   updateJob: jest.fn().mockRejectedValue(new NotAllowedError('mock error')),
   getJobWithLog: jest.fn().mockRejectedValue(new NotAllowedError('mock error')),
   getJobLogs: jest.fn().mockRejectedValue(new NotAllowedError('mock error')),
+  listJobsForProject: jest
+    .fn()
+    .mockRejectedValue(new NotAllowedError('mock error')),
+  listJobsForModule: jest
+    .fn()
+    .mockRejectedValue(new NotAllowedError('mock error')),
 });
 
 const getKubeServiceMock = () =>

workspaces/x2a/plugins/x2a-backend/src/plugin.ts

@@ -38,6 +38,7 @@ export const x2APlugin = createBackendPlugin({
         logger: coreServices.logger,
         discoveryApi: coreServices.discovery,
         permissionsSvc: coreServices.permissions,
+        config: coreServices.rootConfig,
         x2aDatabase: x2aDatabaseServiceRef,
         kubeService: kubeServiceRef,
       },
@@ -50,6 +51,7 @@ export const x2APlugin = createBackendPlugin({
         httpAuth,
         database,
         kubeService,
+        config,
       }) {
         await migrate(database);
 
@@ -61,6 +63,7 @@ export const x2APlugin = createBackendPlugin({
             permissionsSvc,
             x2aDatabase,
             kubeService,
+            config,
           }),
         );
       },

workspaces/x2a/plugins/x2a-backend/src/router.test.ts

@@ -50,8 +50,8 @@ const mockProject2: ProjectsPostRequest = {
   name: 'Another Project',
   description: 'Another Description',
   abbreviation: 'AP',
-  sourceRepoUrl: 'https://github.com/source/repo',
-  targetRepoUrl: 'https://github.com/target/repo',
+  sourceRepoUrl: 'https://github.com/source/repo2',
+  targetRepoUrl: 'https://github.com/target/repo2',
   sourceRepoBranch: 'main',
   targetRepoBranch: 'main',
 };
@@ -162,6 +162,25 @@ async function createApp(
       getBaseUrl: jest.fn().mockResolvedValue('http://localhost:7007/api/x2a'),
       getExternalBaseUrl: jest.fn().mockResolvedValue('http://localhost:7007'),
     },
+    config: mockServices.rootConfig({
+      data: {
+        x2a: {
+          kubernetes: {
+            namespace: 'test-namespace',
+            image: 'test-image',
+            imageTag: 'test',
+            ttlSecondsAfterFinished: 86400,
+            resources: {
+              requests: { cpu: '100m', memory: '128Mi' },
+              limits: { cpu: '200m', memory: '256Mi' },
+            },
+          },
+          credentials: {
+            llm: { LLM_MODEL: 'test-model' },
+          },
+        },
+      },
+    }),
     x2aDatabase,
     kubeService: {
       createProjectSecret: jest.fn().mockResolvedValue(undefined),