fix: Reset DevSpace state on purge

Signed-off-by: Kyle Felter <kfelter@nvidia.com>

Author: kfelternv

dev/deployment/devspace/README.md

@@ -4,7 +4,7 @@ You can use [DevSpace](https://www.devspace.sh) to deploy the complete local inf
 
 The process is broken into two steps:
 
-1. Bootstrap Kubernetes prerequisites. (This only needs to be done once.)
+1. Bootstrap Kubernetes prerequisites. (This only needs to be done once per cluster.)
 2. Run `devspace deploy` to deploy code from this repo
 
 The intent is that the app deploy path stays the same whether the prerequisites are:
@@ -120,6 +120,7 @@ Common usage:
 ```bash
 devspace deploy
 devspace deploy -n nico-system
+devspace deploy --skip-build -n nico-system
 devspace deploy --force-build
 ```
 
@@ -164,17 +165,25 @@ docker build -t "machine-a-tron:<devspace-generated-tag>" -f dev/deployment/devs
 
 DevSpace then deploys the Helm chart with the built `nico-api` image wired into `global.image.repository` and `global.image.tag`, the built `nico-bmc-proxy` image wired into the `nico-bmc-proxy` chart values, and applies the local-only `machine-a-tron` manifest with its image wired into the `Deployment` spec. The REST images are built from the existing `rest-api/docker/local` Dockerfiles and are passed to the three existing REST Helm charts with the same generated tag.
 
-## Re-initializing Core state
+## Resetting the local environment
 
 Once deployed, the `nico-api` container will run and initialize its database, and the `machine-a-tron` container will run a set of mock machines, which will be discovered and ingested into the database, and run through the state machine until they reach a Ready state.
 
-You can purge the deployed product resources by running:
+Reset the complete local environment by running:
 
 ```bash
 devspace purge -n nico-system
 ```
 
-and it will delete the Core and REST Helm releases and the machine-a-tron deployment. Bootstrap-owned services such as PostgreSQL, Vault, Temporal, Keycloak, and cert-manager remain installed.
+The purge pipeline only runs when the current context is `kind-<cluster>`. It deletes and recreates that kind cluster with the same node image, then bootstraps clean prerequisites. This removes all Kubernetes state, including the Core and REST databases, Temporal namespaces and history, Vault data, Keycloak data, certificates, site registration, Helm releases, CRDs, and persistent volumes.
+
+The host Docker images, BuildKit cache, and `.devspace` image metadata are outside the kind node and remain available. Redeploy the last built images without rebuilding them:
+
+```bash
+devspace deploy --skip-build -n nico-system
+```
+
+The pre-deploy hooks load the cached Core and REST images from the host Docker store into the new kind node. Omit `--skip-build` when the source or image definitions have changed since the last build.
 
 To clear only the Core `nico` database, run the nuke-postgres.sh helper script:
 
@@ -191,6 +200,7 @@ devspace deploy -n nico-system
 ## Files
 
 - [`bootstrap-prereqs.sh`](bootstrap-prereqs.sh)
+- [`reset-kind-cluster.sh`](reset-kind-cluster.sh)
 - [`setup-rest-integration.sh`](setup-rest-integration.sh)
 - [`devspace.yaml`](../../../devspace.yaml)
 - [`values.base.yaml`](values.base.yaml)

dev/deployment/devspace/reset-kind-cluster.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
+
+log() {
+  printf '[local-dev] %s\n' "$*"
+}
+
+require_bin() {
+  command -v "$1" >/dev/null 2>&1 || {
+    printf 'missing required binary: %s\n' "$1" >&2
+    exit 1
+  }
+}
+
+main() {
+  require_bin docker
+  require_bin helm
+  require_bin kind
+  require_bin kubectl
+  require_bin base64
+
+  local current_context cluster_name control_plane node_image
+  current_context="$(kubectl config current-context 2>/dev/null || true)"
+  case "${current_context}" in
+    kind-*) cluster_name="${current_context#kind-}" ;;
+    *)
+      printf 'purge requires a kind context; current context is %s\n' \
+        "${current_context:-unset}" >&2
+      exit 1
+      ;;
+  esac
+
+  control_plane="${cluster_name}-control-plane"
+  node_image="$(docker inspect --format '{{.Config.Image}}' "${control_plane}" 2>/dev/null || true)"
+  if [[ -z "${node_image}" ]]; then
+    printf 'could not determine the node image from container %s\n' \
+      "${control_plane}" >&2
+    exit 1
+  fi
+
+  log "Deleting kind cluster ${cluster_name}"
+  kind delete cluster --name "${cluster_name}"
+
+  log "Recreating kind cluster ${cluster_name} with ${node_image}"
+  kind create cluster --name "${cluster_name}" --image "${node_image}"
+
+  log "Installing clean local prerequisites"
+  "${SCRIPT_DIR}/bootstrap-prereqs.sh"
+
+  log "Reset complete; deploy with devspace deploy --skip-build"
+}
+
+main "$@"

devspace.yaml

@@ -30,6 +30,10 @@ vars:
     source: env
     default: "18082"
 
+pipelines:
+  purge: |-
+    LOCAL_DEV_NAMESPACE=${DEVSPACE_NAMESPACE} dev/deployment/devspace/reset-kind-cluster.sh
+
 images:
   nico-api:
     image: nico-api