Add HA for CV and Docs: 2 replicas, rolling updates, PDBs

- Set replicas: 2 with maxUnavailable: 0 / maxSurge: 1 on both
  deployments so rolling updates never drop below 2 ready pods
- Add PodDisruptionBudgets (minAvailable: 1) to protect against
  node drains and cluster maintenance
- Add Fly.io cache purge step to cv-deploy workflow (docs already
  had this) so CV deploys don't serve stale cached content

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.forgejo/workflows/cv-deploy.yaml

@@ -112,6 +112,14 @@ jobs:
 
           echo "CV app synced successfully!"
 
+      - name: Purge Fly.io proxy cache
+        env:
+          FLY_API_TOKEN: ${{ secrets.FLY_DEPLOY_TOKEN }}
+        run: |
+          echo "Purging nginx cache on Fly.io proxy..."
+          fly ssh console -a blumeops-proxy -C "sh -c 'rm -rf /tmp/cache && nginx -s reload'"
+          echo "Cache purged"
+
       - name: Summary
         run: |
           VERSION="${{ steps.version.outputs.version }}"

argocd/manifests/cv/deployment.yaml

@@ -5,7 +5,12 @@ metadata:
   name: cv
   namespace: cv
 spec:
-  replicas: 1
+  replicas: 2
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 0
+      maxSurge: 1
   selector:
     matchLabels:
       app: cv

argocd/manifests/cv/kustomization.yaml

@@ -6,6 +6,7 @@ resources:
   - deployment.yaml
   - service.yaml
   - ingress-tailscale.yaml
+  - pdb.yaml
 images:
   - name: registry.ops.eblu.me/blumeops/cv
     newTag: v1.0.3-ffa8727

argocd/manifests/cv/pdb.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: cv
+spec:
+  minAvailable: 1
+  selector:
+    matchLabels:
+      app: cv

argocd/manifests/docs/deployment.yaml

@@ -5,7 +5,12 @@ metadata:
   name: docs
   namespace: docs
 spec:
-  replicas: 1
+  replicas: 2
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 0
+      maxSurge: 1
   selector:
     matchLabels:
       app: docs

argocd/manifests/docs/kustomization.yaml

@@ -6,6 +6,7 @@ resources:
   - deployment.yaml
   - service.yaml
   - ingress-tailscale.yaml
+  - pdb.yaml
 images:
   - name: registry.ops.eblu.me/blumeops/quartz
     newTag: v1.28.2-ffa8727

argocd/manifests/docs/pdb.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: docs
+spec:
+  minAvailable: 1
+  selector:
+    matchLabels:
+      app: docs

docs/changelog.d/feature/ha-cv-docs-zero-downtime.infra.md

@@ -0,0 +1 @@
+Add HA (2 replicas + PDB) for CV and Docs services for zero-downtime deploys.