RSPEED-2326: feat(config): add SplunkConfiguration model and fields

Add SplunkConfiguration Pydantic model for Splunk HEC settings:
- enabled: toggle for Splunk integration
- url: HEC endpoint URL
- token_path: path to HEC auth token file
- index: target Splunk index
- source: event source identifier (default: lightspeed-stack)
- timeout: HTTP timeout in seconds (default: 5)
- verify_ssl: SSL verification toggle (default: True)

Add splunk and deployment_environment fields to Configuration class.

Signed-off-by: Major Hayden <major@redhat.com>

Author: major

src/models/config.py

@@ -612,6 +612,87 @@ def check_llama_stack_model(self) -> Self:
         return self
 
 
+class SplunkConfiguration(ConfigurationBase):
+    """Splunk HEC (HTTP Event Collector) configuration.
+
+    Splunk HEC allows sending events directly to Splunk over HTTP/HTTPS.
+    This configuration is used to send telemetry events for inference
+    requests to the corporate Splunk deployment.
+
+    Useful resources:
+
+      - [Splunk HEC Docs](https://docs.splunk.com/Documentation/SplunkCloud)
+      - [About HEC](https://docs.splunk.com/Documentation/Splunk/latest/Data)
+    """
+
+    enabled: bool = Field(
+        False,
+        title="Enabled",
+        description="Enable or disable Splunk HEC integration.",
+    )
+
+    url: Optional[str] = Field(
+        None,
+        title="HEC URL",
+        description="Splunk HEC endpoint URL.",
+    )
+
+    token_path: Optional[FilePath] = Field(
+        None,
+        title="Token path",
+        description="Path to file containing the Splunk HEC authentication token.",
+    )
+
+    index: Optional[str] = Field(
+        None,
+        title="Index",
+        description="Target Splunk index for events.",
+    )
+
+    source: str = Field(
+        "lightspeed-stack",
+        title="Source",
+        description="Event source identifier.",
+    )
+
+    timeout: PositiveInt = Field(
+        5,
+        title="Timeout",
+        description="HTTP timeout in seconds for HEC requests.",
+    )
+
+    verify_ssl: bool = Field(
+        True,
+        title="Verify SSL",
+        description="Whether to verify SSL certificates for HEC endpoint.",
+    )
+
+    @model_validator(mode="after")
+    def check_splunk_configuration(self) -> Self:
+        """Validate that required fields are set when Splunk is enabled.
+
+        Returns:
+            Self: The validated configuration instance.
+
+        Raises:
+            ValueError: If enabled is True but required fields are missing.
+        """
+        if self.enabled:
+            missing_fields = []
+            if not self.url:
+                missing_fields.append("url")
+            if not self.token_path:
+                missing_fields.append("token_path")
+            if not self.index:
+                missing_fields.append("index")
+            if missing_fields:
+                raise ValueError(
+                    f"Splunk is enabled but required fields are missing: "
+                    f"{', '.join(missing_fields)}"
+                )
+        return self
+
+
 class UserDataCollection(ConfigurationBase):
     """User data collection configuration."""
 
@@ -1659,6 +1740,19 @@ class Configuration(ConfigurationBase):
     )
     azure_entra_id: Optional[AzureEntraIdConfiguration] = None
 
+    splunk: Optional[SplunkConfiguration] = Field(
+        default=None,
+        title="Splunk configuration",
+        description="Splunk HEC configuration for sending telemetry events.",
+    )
+
+    deployment_environment: str = Field(
+        "development",
+        title="Deployment environment",
+        description="Deployment environment name (e.g., 'development', 'staging', 'production'). "
+        "Used in telemetry events.",
+    )
+
     @model_validator(mode="after")
     def validate_mcp_auth_headers(self) -> Self:
         """

tests/unit/models/config/test_splunk_configuration.py

@@ -0,0 +1,107 @@
+"""Unit tests for SplunkConfiguration model."""
+
+from pathlib import Path
+
+import pytest
+
+from models.config import SplunkConfiguration
+
+
+@pytest.fixture(name="token_file")
+def token_file_fixture(tmp_path: Path) -> Path:
+    """Create a temporary token file for testing."""
+    token_file = tmp_path / "token"
+    token_file.write_text("test-token")
+    return token_file
+
+
+def test_default_values() -> None:
+    """Test default SplunkConfiguration has expected values."""
+    cfg = SplunkConfiguration()
+    assert cfg.enabled is False
+    assert cfg.url is None
+    assert cfg.token_path is None
+    assert cfg.index is None
+    assert cfg.source == "lightspeed-stack"
+    assert cfg.timeout == 5
+    assert cfg.verify_ssl is True
+
+
+def test_disabled_skips_validation() -> None:
+    """Test that disabled Splunk config doesn't require other fields."""
+    cfg = SplunkConfiguration(enabled=False)
+    assert cfg.enabled is False
+    assert cfg.url is None
+
+
+@pytest.mark.parametrize(
+    ("url", "has_token", "index", "expected_missing"),
+    [
+        (None, False, None, r"url.*token_path.*index"),
+        ("https://splunk:8088", False, None, r"token_path.*index"),
+        ("https://splunk:8088", False, "idx", r"token_path"),
+        ("https://splunk:8088", True, None, r"index"),
+        (None, True, "idx", r"url"),
+    ],
+    ids=[
+        "all_missing",
+        "url_present_only",
+        "url_and_index_present",
+        "url_and_token_present",
+        "token_and_index_present",
+    ],
+)
+def test_enabled_missing_required_fields(
+    token_file: Path,
+    url: str | None,
+    has_token: bool,
+    index: str | None,
+    expected_missing: str,
+) -> None:
+    """Test that enabled Splunk config validates required fields."""
+    with pytest.raises(ValueError, match=expected_missing):
+        SplunkConfiguration(
+            enabled=True,
+            url=url,
+            token_path=token_file if has_token else None,
+            index=index,
+        )
+
+
+def test_valid_enabled_configuration(token_file: Path) -> None:
+    """Test valid enabled Splunk configuration passes validation."""
+    cfg = SplunkConfiguration(
+        enabled=True,
+        url="https://splunk.example.com:8088",
+        token_path=token_file,
+        index="rhel_lightspeed",
+        source="my-service",
+        timeout=10,
+        verify_ssl=False,
+    )
+
+    assert cfg.enabled is True
+    assert cfg.url == "https://splunk.example.com:8088"
+    assert cfg.token_path == token_file
+    assert cfg.index == "rhel_lightspeed"
+    assert cfg.source == "my-service"
+    assert cfg.timeout == 10
+    assert cfg.verify_ssl is False
+
+
+def test_custom_source() -> None:
+    """Test custom source value is preserved."""
+    cfg = SplunkConfiguration(enabled=False, source="custom-source")
+    assert cfg.source == "custom-source"
+
+
+def test_custom_timeout() -> None:
+    """Test custom timeout value is preserved."""
+    cfg = SplunkConfiguration(enabled=False, timeout=30)
+    assert cfg.timeout == 30
+
+
+def test_verify_ssl_disabled() -> None:
+    """Test verify_ssl can be disabled."""
+    cfg = SplunkConfiguration(enabled=False, verify_ssl=False)
+    assert cfg.verify_ssl is False