[rushtong]

Addresses

https://broadworkbench.atlassian.net/browse/DT-4348

Stacked PRs (merge in order):

1. [DT-4348][risk=no] Render the local certs with render-configs.sh (1/5) #3177 Base and certs
2. [DT-4348][risk=no] Render consent.yaml, site.conf and oauth2.conf from terra-helmfile (2/5) #3178 Chart configs
3. [DT-4348][risk=no] Render the local compose files and .env (3/5) #3179 Compose
4. [DT-4348][risk=no] Export the dev database and fill the local index (4/5) #3180 Dump and index
5. [DT-4348][risk=no] Render the local config in the Dev Container (5/5) #3181 Dev Container ← this PR

Summary

The Dev Container renders all local config, the same way as the duos-ui Dev Container after DT-4236.

• scripts/setup-devcontainer.sh: the postCreateCommand. It installs gcloud, the GKE auth plugin, jq, openssl and gzip with apt-get, runs gcloud auth login if no account is active, and runs render-configs.sh --all true. On a failure it exits non-zero and asks about the VPN. It prints the ADC command for the container mode.
• .devcontainer/devcontainer.json: adds the kubectl-helm-minikube feature with helm 4.2.3, postCreateCommand, and forwardPorts 27443, 7777 and 9200. The lock file is updated. There is no Dockerfile and no gh, as in duos-ui.
• DEVNOTES.md: a "Dev Container" section, like the one in duos-ui.

Testing

• bash -n on the script.
• Not tested: a real container build and the first start. Plan check 2 (one start in each mode, container and host) must run before merge.

---

Have you read CONTRIBUTING.md lately? If not, do that first.

• Label PR with a Jira ticket number and include a link to the ticket
• Label PR with a security risk modifier [no, low, medium, high]
• PR describes scope of changes
• Get a minimum of one thumbs worth of review, preferably two if enough team members are available
• Get PO sign-off for all non-trivial UI or workflow changes
• Verify all tests go green
• Test this change deployed correctly and works on dev environment after deployment

🤖 Generated with Claude Code