feat: add kind-local overlay and kind-local-up target

- Add kind-local kustomize overlay for local development without Quay
- Add make kind-local-up target for fully local dev workflow
- Add vteam_public_api to load-images.sh and minikube _build-and-load
- Fix OCI archive path bug in load-images.sh (colon in tag created nested path)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: jeremyeder

Makefile

@@ -4,7 +4,7 @@
 .PHONY: local-logs local-logs-backend local-logs-frontend local-logs-operator local-shell local-shell-frontend
 .PHONY: local-test local-test-dev local-test-quick test-all local-url local-troubleshoot local-port-forward local-stop-port-forward
 .PHONY: push-all registry-login setup-hooks remove-hooks check-minikube check-kind check-kubectl
-.PHONY: e2e-test e2e-setup e2e-clean deploy-langfuse-openshift
+.PHONY: e2e-test e2e-setup e2e-clean deploy-langfuse-openshift kind-local-up
 .PHONY: setup-minio minio-console minio-logs minio-status
 .PHONY: validate-makefile lint-makefile check-shell makefile-health
 .PHONY: _create-operator-config _auto-port-forward _show-access-info _build-and-load
@@ -606,6 +606,47 @@ kind-up: check-kind check-kubectl ## Start kind cluster with Quay.io images (pro
 	@echo "Run tests:"
 	@echo "  make test-e2e"
 
+kind-local-up: check-kind check-kubectl ## Start kind cluster with locally built images
+	@echo "$(COLOR_BOLD)Starting kind cluster with locally built images$(COLOR_RESET)"
+	@echo ""
+	@echo "$(COLOR_BLUE)▶$(COLOR_RESET) Step 1/6: Creating kind cluster..."
+	@cd e2e && CONTAINER_ENGINE=$(CONTAINER_ENGINE) ./scripts/setup-kind.sh
+	@for i in 1 2 3 4 5 6 7 8 9 10; do \
+		if kubectl cluster-info >/dev/null 2>&1; then \
+			echo "$(COLOR_GREEN)✓$(COLOR_RESET) API server ready"; \
+			break; \
+		fi; \
+		if [ $$i -eq 10 ]; then \
+			echo "$(COLOR_RED)✗$(COLOR_RESET) Timeout waiting for API server"; \
+			exit 1; \
+		fi; \
+		sleep 3; \
+	done
+	@echo "$(COLOR_BLUE)▶$(COLOR_RESET) Step 2/6: Building all images locally..."
+	@$(MAKE) --no-print-directory build-all
+	@echo "$(COLOR_BLUE)▶$(COLOR_RESET) Step 3/6: Loading images into kind cluster..."
+	@cd e2e && CONTAINER_ENGINE=$(CONTAINER_ENGINE) ./scripts/load-images.sh
+	@echo "$(COLOR_BLUE)▶$(COLOR_RESET) Step 4/6: Deploying with local images..."
+	@kubectl apply --validate=false -k components/manifests/overlays/kind-local/
+	@echo "$(COLOR_BLUE)▶$(COLOR_RESET) Step 5/6: Waiting for pods..."
+	@cd e2e && ./scripts/wait-for-ready.sh
+	@echo "$(COLOR_BLUE)▶$(COLOR_RESET) Step 6/6: Initializing MinIO and extracting test token..."
+	@cd e2e && ./scripts/init-minio.sh
+	@cd e2e && CONTAINER_ENGINE=$(CONTAINER_ENGINE) ./scripts/extract-token.sh
+	@echo "$(COLOR_GREEN)✓$(COLOR_RESET) Kind cluster ready with local images!"
+	@echo ""
+	@echo "$(COLOR_BOLD)Access the platform:$(COLOR_RESET)"
+	@echo "  Run in another terminal: $(COLOR_BLUE)make kind-port-forward$(COLOR_RESET)"
+	@echo ""
+	@echo "  Then access:"
+	@echo "  Frontend: http://localhost:8080"
+	@echo "  Backend:  http://localhost:8081"
+	@echo ""
+	@echo "  Get test token: kubectl get secret test-user-token -n ambient-code -o jsonpath='{.data.token}' | base64 -d"
+	@echo ""
+	@echo "Run tests:"
+	@echo "  make test-e2e"
+
 kind-down: ## Stop and delete kind cluster
 	@echo "$(COLOR_BLUE)▶$(COLOR_RESET) Cleaning up kind cluster..."
 	@cd e2e && CONTAINER_ENGINE=$(CONTAINER_ENGINE) ./scripts/cleanup.sh
@@ -700,21 +741,26 @@ _build-and-load: ## Internal: Build and load images
 	@$(CONTAINER_ENGINE) build $(PLATFORM_FLAG) -t $(OPERATOR_IMAGE) components/operator $(QUIET_REDIRECT)
 	@echo "  Building runner ($(PLATFORM))..."
 	@$(CONTAINER_ENGINE) build $(PLATFORM_FLAG) -t $(RUNNER_IMAGE) -f components/runners/claude-code-runner/Dockerfile components/runners $(QUIET_REDIRECT)
+	@echo "  Building public-api ($(PLATFORM))..."
+	@$(CONTAINER_ENGINE) build $(PLATFORM_FLAG) -t $(PUBLIC_API_IMAGE) components/public-api $(QUIET_REDIRECT)
 	@echo "  Tagging images with localhost prefix..."
 	@$(CONTAINER_ENGINE) tag $(BACKEND_IMAGE) localhost/$(BACKEND_IMAGE) 2>/dev/null || true
 	@$(CONTAINER_ENGINE) tag $(FRONTEND_IMAGE) localhost/$(FRONTEND_IMAGE) 2>/dev/null || true
 	@$(CONTAINER_ENGINE) tag $(OPERATOR_IMAGE) localhost/$(OPERATOR_IMAGE) 2>/dev/null || true
 	@$(CONTAINER_ENGINE) tag $(RUNNER_IMAGE) localhost/$(RUNNER_IMAGE) 2>/dev/null || true
+	@$(CONTAINER_ENGINE) tag $(PUBLIC_API_IMAGE) localhost/$(PUBLIC_API_IMAGE) 2>/dev/null || true
 	@echo "  Loading images into minikube..."
 	@mkdir -p /tmp/minikube-images
 	@$(CONTAINER_ENGINE) save -o /tmp/minikube-images/backend.tar localhost/$(BACKEND_IMAGE)
 	@$(CONTAINER_ENGINE) save -o /tmp/minikube-images/frontend.tar localhost/$(FRONTEND_IMAGE)
 	@$(CONTAINER_ENGINE) save -o /tmp/minikube-images/operator.tar localhost/$(OPERATOR_IMAGE)
 	@$(CONTAINER_ENGINE) save -o /tmp/minikube-images/runner.tar localhost/$(RUNNER_IMAGE)
+	@$(CONTAINER_ENGINE) save -o /tmp/minikube-images/public-api.tar localhost/$(PUBLIC_API_IMAGE)
 	@minikube image load /tmp/minikube-images/backend.tar $(QUIET_REDIRECT)
 	@minikube image load /tmp/minikube-images/frontend.tar $(QUIET_REDIRECT)
 	@minikube image load /tmp/minikube-images/operator.tar $(QUIET_REDIRECT)
 	@minikube image load /tmp/minikube-images/runner.tar $(QUIET_REDIRECT)
+	@minikube image load /tmp/minikube-images/public-api.tar $(QUIET_REDIRECT)
 	@rm -rf /tmp/minikube-images
 	@echo "$(COLOR_GREEN)✓$(COLOR_RESET) Images built and loaded"
 

components/manifests/overlays/kind-local/backend-env-patch.yaml

@@ -0,0 +1,15 @@
+# Patch backend to use IfNotPresent for dynamically created resources
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: backend-api
+spec:
+  template:
+    spec:
+      containers:
+      - name: backend-api
+        env:
+        - name: IMAGE_PULL_POLICY
+          value: "IfNotPresent"
+        - name: CONTENT_SERVICE_IMAGE
+          value: "docker.io/library/vteam_backend:latest"

components/manifests/overlays/kind-local/image-pull-policy-patch.yaml

@@ -0,0 +1,5 @@
+# Patch to set imagePullPolicy: IfNotPresent for kind-local cluster
+# Uses locally built and loaded images, not pulled from a registry
+- op: replace
+  path: /spec/template/spec/containers/0/imagePullPolicy
+  value: IfNotPresent

components/manifests/overlays/kind-local/kustomization.yaml

@@ -0,0 +1,62 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+# Build on top of the kind overlay (inherits base, secrets, test-user, etc.)
+resources:
+- ../kind
+
+# Override patches for kind-local environment
+patches:
+# Use locally built runner/state-sync images with IfNotPresent
+- path: operator-env-patch.yaml
+  target:
+    kind: Deployment
+    name: agentic-operator
+# Override backend env vars to use local images and IfNotPresent
+- path: backend-env-patch.yaml
+  target:
+    kind: Deployment
+    name: backend-api
+
+# JSON patches to override imagePullPolicy to IfNotPresent
+patchesJson6902:
+- target:
+    group: apps
+    version: v1
+    kind: Deployment
+    name: backend-api
+  path: image-pull-policy-patch.yaml
+- target:
+    group: apps
+    version: v1
+    kind: Deployment
+    name: frontend
+  path: image-pull-policy-patch.yaml
+- target:
+    group: apps
+    version: v1
+    kind: Deployment
+    name: agentic-operator
+  path: image-pull-policy-patch.yaml
+- target:
+    group: apps
+    version: v1
+    kind: Deployment
+    name: public-api
+  path: image-pull-policy-patch.yaml
+
+# Kind-local overlay: Use locally built images loaded via `kind load`
+# Images are imported with docker.io/library/ prefix by ctr
+images:
+- name: quay.io/ambient_code/vteam_backend
+  newName: docker.io/library/vteam_backend
+  newTag: latest
+- name: quay.io/ambient_code/vteam_frontend
+  newName: docker.io/library/vteam_frontend
+  newTag: latest
+- name: quay.io/ambient_code/vteam_operator
+  newName: docker.io/library/vteam_operator
+  newTag: latest
+- name: quay.io/ambient_code/vteam_public_api
+  newName: docker.io/library/vteam_public_api
+  newTag: latest

components/manifests/overlays/kind-local/operator-env-patch.yaml

@@ -0,0 +1,19 @@
+# Patch operator to use locally built runner/state-sync images
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: agentic-operator
+spec:
+  template:
+    spec:
+      containers:
+      - name: agentic-operator
+        env:
+        - name: AMBIENT_CODE_RUNNER_IMAGE
+          value: "docker.io/library/vteam_claude_runner:latest"
+        - name: STATE_SYNC_IMAGE
+          value: "docker.io/library/vteam_state_sync:latest"
+        - name: IMAGE_PULL_POLICY
+          value: "IfNotPresent"
+        - name: POD_FSGROUP
+          value: "0"

e2e/scripts/load-images.sh

@@ -47,6 +47,7 @@ IMAGES=(
   "vteam_operator:latest"
   "vteam_claude_runner:latest"
   "vteam_state_sync:latest"
+  "vteam_public_api:latest"
 )
 
 echo ""
@@ -67,19 +68,20 @@ for IMAGE in "${IMAGES[@]}"; do
     echo "      ⚠️  Image is $IMAGE_ARCH, host is $EXPECTED_ARCH (may be slow)"
   fi
 
-  # Save as OCI archive
-  $CONTAINER_ENGINE save --format oci-archive -o "/tmp/${IMAGE//://}.oci.tar" "$IMAGE"
-  
+  # Save as OCI archive (replace : with - for flat filename)
+  ARCHIVE="/tmp/${IMAGE//:/-}.oci.tar"
+  $CONTAINER_ENGINE save --format oci-archive -o "$ARCHIVE" "$IMAGE"
+
   # Import into kind node with docker.io/library prefix so kubelet can find it
-  cat "/tmp/${IMAGE//://}.oci.tar" | \
+  cat "$ARCHIVE" | \
     $CONTAINER_ENGINE exec -i ambient-local-control-plane \
     ctr --namespace=k8s.io images import --no-unpack \
     --index-name "docker.io/library/$IMAGE" - 2>&1 | grep -q "saved" && \
     echo "      ✓ $IMAGE loaded" || \
     echo "      ⚠️  $IMAGE may have failed"
-  
+
   # Cleanup temp file
-  rm -f "/tmp/${IMAGE//://}.oci.tar"
+  rm -f "$ARCHIVE"
 done
 
 echo ""