[SREP-618] feat: Add refresh command to fetch config from server (#899)

* Add /config endpoint integration with lazy loading

Implements client-side integration for the new /config API endpoint
that allows backplane-cli to fetch server-managed configuration values.

Features:
- Refresh command: 'ocm backplane config refresh' to force update server values
- Backwards compatible: Existing config files work without changes

Implementation:
- New ConfigAPIClient interface for fetching remote config
- New refresh command to manually update server-managed values

Server-managed values:
- jira-base-url
- assume-initial-arn
- prod-env-name
- jira-config-for-access-requests

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* Verify the logging

Signed-off-by: Daniel Hall <danhall@redhat.com>

* Don't write empty jira values to config

Signed-off-by: Daniel Hall <danhall@redhat.com>

* Fix proxy support for config refresh command

Use backplaneapi.DefaultClientUtils.GetBackplaneClient() instead of
direct client creation to ensure proper proxy configuration and
authentication. This fixes timeout issues when running behind
corporate proxies.

Signed-off-by: Daniel Hall <danhall@redhat.com>

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* Improve code quality in mapJiraAccessRequestConfig

- Add early return to avoid wasteful allocation when config is empty
- Extract magic strings to constants (transitionStateApproved, etc.)
- Enhance documentation to clarify nil-return contract
- Reuse hasTransitions variable to avoid duplicate checks

These changes improve efficiency by preventing unnecessary struct and
map allocations in the common case where the API returns empty config.

Signed-off-by: Daniel Hall <danhall@redhat.com>

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* Fix test isolation for TestNoAutomaticConfigFetch

Set BACKPLANE_CONFIG to a non-existent path in the test to prevent
it from reading the user's actual config file. This ensures test
isolation and prevents test failures when the user's config contains
different values than the test expects.

Signed-off-by: Daniel Hall <danhall@redhat.com>

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

---------

Signed-off-by: Daniel Hall <danhall@redhat.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: smarthall

cmd/ocm-backplane/config/config.go

@@ -32,5 +32,6 @@ govcloud    Set to true if used in FedRAMP
 	cmd.AddCommand(newGetCmd())
 	cmd.AddCommand(newSetCmd())
 	cmd.AddCommand(newTroubleshootCmd())
+	cmd.AddCommand(newRefreshCmd())
 	return cmd
 }

cmd/ocm-backplane/config/refresh.go

@@ -0,0 +1,118 @@
+package config
+
+import (
+	"fmt"
+
+	"github.com/spf13/cobra"
+	"github.com/spf13/viper"
+
+	"github.com/openshift/backplane-cli/pkg/backplaneapi"
+	"github.com/openshift/backplane-cli/pkg/cli/config"
+	"github.com/openshift/backplane-cli/pkg/ocm"
+	logger "github.com/sirupsen/logrus"
+)
+
+func newRefreshCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   "refresh",
+		Short: "Refresh configuration from backplane-api server",
+		Long: `Fetch the latest configuration values from the backplane-api server and update the local config file.
+
+This command will overwrite the following server-managed configuration values:
+  - jira-base-url
+  - assume-initial-arn
+  - prod-env-name
+  - jira-config-for-access-requests
+
+User-defined values (proxy-url, session-dir, etc.) will not be modified.`,
+		SilenceUsage: true,
+		Args:         cobra.NoArgs,
+		RunE:         runRefresh,
+	}
+
+	return cmd
+}
+
+func runRefresh(cmd *cobra.Command, args []string) error {
+	logger.Info("Refreshing configuration from backplane-api...")
+
+	// Get current config to determine backplane URL
+	bpConfig, err := config.GetBackplaneConfiguration()
+	if err != nil {
+		return fmt.Errorf("failed to load current configuration: %w", err)
+	}
+
+	// Get OCM access token
+	token, err := ocm.DefaultOCMInterface.GetOCMAccessToken()
+	if err != nil {
+		return fmt.Errorf("failed to get OCM access token: %w", err)
+	}
+
+	// Create backplane API client with proper proxy support
+	client, err := backplaneapi.DefaultClientUtils.GetBackplaneClient(bpConfig.URL, *token, bpConfig.ProxyURL)
+	if err != nil {
+		return fmt.Errorf("failed to create backplane API client: %w", err)
+	}
+
+	// Fetch fresh config from API
+	remoteConfig, err := config.DefaultAPIClient.FetchRemoteConfig(client)
+	if err != nil {
+		return fmt.Errorf("failed to fetch configuration from server: %w", err)
+	}
+
+	// Get config file path
+	configPath, err := config.GetConfigFilePath()
+	if err != nil {
+		return fmt.Errorf("failed to get config file path: %w", err)
+	}
+
+	// Reset viper to clear any defaults that were set by GetBackplaneConfiguration
+	// This prevents defaults like 'govcloud' from leaking into the user's config file
+	viper.Reset()
+
+	// Load existing config file to preserve user settings
+	viper.SetConfigFile(configPath)
+	viper.SetConfigType("json")
+	if err := viper.ReadInConfig(); err != nil {
+		// If config doesn't exist, that's okay - we'll create it
+		logger.Debugf("No existing config file found, will create new one")
+	}
+
+	// Update only server-managed values
+	updated := false
+	if remoteConfig.JiraBaseURL != nil {
+		viper.Set(config.JiraBaseURLKey, *remoteConfig.JiraBaseURL)
+		logger.Infof("Updated jira-base-url: %s", *remoteConfig.JiraBaseURL)
+		updated = true
+	}
+
+	if remoteConfig.AssumeInitialArn != nil {
+		viper.Set(config.AssumeInitialArnKey, *remoteConfig.AssumeInitialArn)
+		logger.Infof("Updated assume-initial-arn: %s", *remoteConfig.AssumeInitialArn)
+		updated = true
+	}
+
+	if remoteConfig.ProdEnvName != nil {
+		viper.Set(config.ProdEnvNameKey, *remoteConfig.ProdEnvName)
+		logger.Infof("Updated prod-env-name: %s", *remoteConfig.ProdEnvName)
+		updated = true
+	}
+
+	if remoteConfig.JiraConfigForAccessRequests != nil {
+		viper.Set(config.JiraConfigForAccessRequestsKey, remoteConfig.JiraConfigForAccessRequests)
+		logger.Info("Updated jira-config-for-access-requests")
+		updated = true
+	}
+
+	if !updated {
+		logger.Warn("No configuration values were returned from the server")
+	}
+
+	// Write updated config to file
+	if err := viper.WriteConfigAs(configPath); err != nil {
+		return fmt.Errorf("failed to write config file: %w", err)
+	}
+
+	fmt.Printf("Configuration refreshed successfully and saved to %s\n", configPath)
+	return nil
+}