Updated manifests and DataSource claim tag

Author: sakshiep1

api/v1alpha1/proposal_types.go

@@ -277,7 +277,7 @@ type DataSource struct {
 	// +kubebuilder:validation:MinLength=1
 	// +kubebuilder:validation:MaxLength=253
 	// +kubebuilder:validation:XValidation:rule="!format.dns1123Subdomain().validate(self).hasValue()",message="must be a valid DNS subdomain"
-	ClaimName string `json:"claimName,omitempty"`
+	ClaimName string `json:"claimName"`
 }
 
 // ProposalSpec defines the desired state of Proposal.

config/crd/bases/agentic.openshift.io_proposals.yaml

@@ -484,6 +484,28 @@ spec:
                 x-kubernetes-validations:
                 - message: schema is required when mode is Minimal
                   rule: self.mode != 'Minimal' || has(self.schema)
+              dataSource:
+                description: |-
+                  dataSource references a PVC containing pre-populated input data
+                  (e.g., must-gather bundles, diagnostic data). The operator mounts
+                  it read-only at /data/input in the sandbox pod. Skills discover
+                  input data at this standard location.
+
+                  Immutable: input data source is fixed at creation.
+                properties:
+                  claimName:
+                    description: |-
+                      claimName is the name of the PersistentVolumeClaim to mount.
+                      The PVC must exist in the same namespace as the Proposal.
+                    maxLength: 253
+                    minLength: 1
+                    type: string
+                    x-kubernetes-validations:
+                    - message: must be a valid DNS subdomain
+                      rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                required:
+                - claimName
+                type: object
               execution:
                 description: |-
                   execution defines per-step configuration for the execution step.
@@ -1710,6 +1732,9 @@ spec:
             - message: verification is immutable once set
               rule: '!has(oldSelf.verification) || (has(self.verification) && self.verification
                 == oldSelf.verification)'
+            - message: dataSource is immutable once set
+              rule: '!has(oldSelf.dataSource) || (has(self.dataSource) && self.dataSource
+                == oldSelf.dataSource)'
           status:
             description: status defines the observed state of Proposal.
             minProperties: 1

config/rbac/role.yaml

@@ -4,6 +4,14 @@ kind: ClusterRole
 metadata:
   name: agentic-operator-manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - persistentvolumeclaims
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - agentic.openshift.io
   resources:
@@ -42,12 +50,8 @@ rules:
 - apiGroups:
   - agentic.openshift.io
   resources:
-  - analysisresults/status
-  - escalationresults/status
-  - executionresults/status
   - proposalapprovals/status
   - proposals/status
-  - verificationresults/status
   verbs:
   - get
   - patch
@@ -58,27 +62,6 @@ rules:
   - proposals/finalizers
   verbs:
   - update
-- apiGroups:
-  - agents.x-k8s.io
-  resources:
-  - sandboxes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - extensions.agents.x-k8s.io
-  resources:
-  - sandboxclaims
-  - sandboxtemplates
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
 - apiGroups:
   - rbac.authorization.k8s.io
   resources:

controller/proposal/sandbox.go

@@ -50,7 +50,7 @@ func (m *SandboxManager) buildClaim(claimName, proposalName, step, templateName
 				"namespace": m.Namespace,
 				"labels": map[string]any{
 					LabelProposal: proposalName,
-				LabelStep:     step,
+					LabelStep:     step,
 				},
 			},
 			"spec": map[string]any{

controller/proposal/sandbox_agent.go

@@ -66,6 +66,7 @@ func proposalTimeout(proposal *agenticv1alpha1.Proposal) time.Duration {
 	}
 	return defaultSandboxTimeout
 }
+
 func stepString(step agenticv1alpha1.SandboxStep) string {
 	return strings.ToLower(string(step))
 }