refactor(manifests): extract shared patches into Kustomize Components

components/manifests/base/core/kustomization.yaml

@@ -0,0 +1,26 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- backend-deployment.yaml
+- frontend-deployment.yaml
+- operator-deployment.yaml
+- public-api-deployment.yaml
+- workspace-pvc.yaml
+- minio-deployment.yaml
+- postgresql-deployment.yaml
+- ambient-api-server-service.yml
+- unleash-deployment.yaml
+- agent-registry-configmap.yaml
+
+configMapGenerator:
+- name: ambient-models
+  files:
+  - models.json
+  options:
+    disableNameSuffixHash: true
+- name: ambient-flags
+  files:
+  - flags.json
+  options:
+    disableNameSuffixHash: true

components/manifests/base/kustomization.yaml

@@ -4,37 +4,10 @@ kind: Kustomization
 metadata:
   name: vteam-ambient-runner-base
 
-# Common resources across all environments
 resources:
-- namespace.yaml
-- crds
+- core
 - rbac
-- backend-deployment.yaml
-- frontend-deployment.yaml
-- operator-deployment.yaml
-- public-api-deployment.yaml
-- workspace-pvc.yaml
-- minio-deployment.yaml
-- postgresql-deployment.yaml
-- ambient-api-server-secrets.yml
-- ambient-api-server-db.yml
-- ambient-api-server-service.yml
-- unleash-deployment.yaml
-- agent-registry-configmap.yaml
-
-# Model manifest ConfigMap (single source of truth for available models)
-# Feature flags ConfigMap (generic flags synced to Unleash on startup)
-configMapGenerator:
-- name: ambient-models
-  files:
-  - models.json
-  options:
-    disableNameSuffixHash: true
-- name: ambient-flags
-  files:
-  - flags.json
-  options:
-    disableNameSuffixHash: true
+- platform
 
 # Default images (can be overridden by overlays)
 images:

components/manifests/base/platform/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- namespace.yaml
+- ../crds
+- ambient-api-server-secrets.yml
+- ambient-api-server-db.yml

components/manifests/components/ambient-api-server-db/kustomization.yaml

@@ -0,0 +1,18 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+# Requires: ambient-api-server-db Secret in the target namespace
+
+patches:
+- path: ambient-api-server-db-json-patch.yaml
+  target:
+    group: apps
+    kind: Deployment
+    name: ambient-api-server-db
+    version: v1
+- path: ambient-api-server-init-db-patch.yaml
+  target:
+    group: apps
+    kind: Deployment
+    name: ambient-api-server
+    version: v1

components/manifests/components/oauth-proxy/kustomization.yaml

@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+- path: frontend-oauth-deployment-patch.yaml
+  target:
+    kind: Deployment
+    name: frontend
+- path: frontend-oauth-service-patch.yaml
+  target:
+    kind: Service
+    name: frontend-service

components/manifests/components/postgresql-init-scripts/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+resources:
+- postgresql-init-scripts.yaml
+
+patches:
+- path: postgresql-init-scripts-patch.yaml
+  target:
+    group: apps
+    version: v1
+    kind: Deployment
+    name: postgresql

components/manifests/components/postgresql-rhel/kustomization.yaml

@@ -0,0 +1,18 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+# Requires: postgresql-credentials Secret in the target namespace
+
+patches:
+- path: postgresql-json-patch.yaml
+  target:
+    group: apps
+    kind: Deployment
+    name: postgresql
+    version: v1
+- path: unleash-init-db-patch.yaml
+  target:
+    group: apps
+    kind: Deployment
+    name: unleash
+    version: v1

components/manifests/overlays/e2e/kustomization.yaml

@@ -14,8 +14,9 @@ resources:
 - minio-credentials.yaml
 - postgresql-credentials.yaml
 - unleash-credentials.yaml
-# PostgreSQL init scripts for database creation
-- postgresql-init-scripts.yaml
+
+components:
+- ../../components/postgresql-init-scripts
 
 # Patches for e2e environment
 patches:
@@ -58,13 +59,6 @@ patches:
     version: v1
     kind: Deployment
     name: agentic-operator
-# PostgreSQL: add init-scripts volume for database creation
-- path: postgresql-init-scripts-patch.yaml
-  target:
-    group: apps
-    version: v1
-    kind: Deployment
-    name: postgresql
 
 # E2E images - use local builds (all components)
 # Runner image is controlled by AMBIENT_CODE_RUNNER_IMAGE in operator-env-patch

components/manifests/overlays/kind/kustomization.yaml

@@ -3,7 +3,7 @@ kind: Kustomization
 
 namespace: ambient-code
 
-# Resources (base + e2e-specific)
+# Resources (base + kind-specific)
 resources:
 - ../../base
 - secrets.yaml
@@ -13,10 +13,11 @@ resources:
 - minio-credentials.yaml
 - postgresql-credentials.yaml
 - unleash-credentials.yaml
-# PostgreSQL init scripts for database creation (kind only)
-- postgresql-init-scripts.yaml
 
-# Patches for e2e environment
+components:
+- ../../components/postgresql-init-scripts
+
+# Patches for kind environment
 patches:
 - path: ambient-api-server-jwks-patch.yaml
   target:
@@ -80,13 +81,6 @@ patches:
     version: v1
     kind: Deployment
     name: public-api
-# PostgreSQL: add init-scripts volume for database creation
-- path: postgresql-init-scripts-patch.yaml
-  target:
-    group: apps
-    version: v1
-    kind: Deployment
-    name: postgresql
 
 # Kind overlay: Use Quay.io production images by default
 # For local development with local images, use overlays/kind-local/ instead

components/manifests/overlays/local-dev/kustomization.yaml

@@ -16,6 +16,11 @@ resources:
 - unleash-credentials.yaml
 - unleash-route.yaml
 
+# Reusable components
+components:
+- ../../components/postgresql-rhel
+- ../../components/ambient-api-server-db
+
 # Patches for local dev environment
 patches:
 # Strategic merge patches
@@ -39,28 +44,6 @@ patches:
     name: ambient-api-server
 # Ambient API Server DB: fix db.host for vteam- namePrefix
 - path: ambient-api-server-db-credentials-patch.yaml
-# Ambient API Server: init container to wait for DB and create database
-- path: ambient-api-server-init-db-patch.yaml
-  target:
-    group: apps
-    version: v1
-    kind: Deployment
-    name: ambient-api-server
-# Unleash: init container to create database (RHEL doesn't support init scripts)
-- path: unleash-init-db-patch.yaml
-# PostgreSQL: use RHEL image with proper env vars and mount paths (JSON patch)
-- path: postgresql-json-patch.yaml
-  target:
-    group: apps
-    version: v1
-    kind: Deployment
-    name: postgresql
-- path: ambient-api-server-db-json-patch.yaml
-  target:
-    group: apps
-    version: v1
-    kind: Deployment
-    name: ambient-api-server-db
 
 # Name prefix for local dev resources
 namePrefix: vteam-