Scale services to 2+ replicas for HA

- ArgoCD: server and repo-server → 2 replicas
- GitLab: webservice, sidekiq, registry, KAS, praefect → min 2 replicas
- Guacamole: client and guacd → 2 replicas
- Kiali: 1 → 2 replicas
- Alertmanager: add 2 replicas
- TeslaMate CNPG: 1 → 2 instances

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/argocd/values.yaml

@@ -56,6 +56,7 @@ configs:
       g, Scooby, role:admin
 
 server:
+  replicas: 2
   extraArgs:
     - --insecure  # TLS is terminated at Istio gateway
 
@@ -100,6 +101,7 @@ controller:
         release: prometheus
 
 repoServer:
+  replicas: 2
   hostAliases:
     - ip: "172.28.101.244"
       hostnames:

apps/gitlab/values.yaml

@@ -140,7 +140,7 @@ minio:
 registry:
   enabled: true
   hpa:
-    minReplicas: 1
+    minReplicas: 2
     maxReplicas: 2
   resources:
     requests:
@@ -153,7 +153,7 @@ registry:
 gitlab:
   # GitLab Webservice - Main application
   webservice:
-    minReplicas: 1  # Homelab sizing
+    minReplicas: 2
     maxReplicas: 3
 
     # Note: hostAliases for OIDC SSL validation are applied via helmfile postsync hook
@@ -237,8 +237,8 @@ gitlab:
   # GitLab KAS (Kubernetes Agent Server) - enabled for Kubernetes cluster integration
   kas:
     enabled: true
-    minReplicas: 1
+    minReplicas: 2
-    maxReplicas: 1
+    maxReplicas: 2
     resources:
       requests:
         cpu: 25m
@@ -269,8 +269,8 @@ gitlab:
   # Praefect - Gitaly Cluster routing and transaction manager
   praefect:
     enabled: true
-    minReplicas: 1  # Homelab sizing
+    minReplicas: 2
-    maxReplicas: 1
+    maxReplicas: 2
     
     # Note: Praefect PostgreSQL config is in global.praefect.psql
     
@@ -302,8 +302,8 @@ gitlab:
   
   # Sidekiq background jobs
   sidekiq:
-    minReplicas: 1  # Homelab sizing
+    minReplicas: 2
-    maxReplicas: 1
+    maxReplicas: 2
     
     # Note: hostAliases applied via helmfile postsync hook
     

apps/guacamole/manifests/deployment-complete.yaml

@@ -13,12 +13,12 @@ metadata:
     app: guacamole
     component: client
 spec:
-  replicas: 1
+  replicas: 2
   strategy:
     type: RollingUpdate
     rollingUpdate:
-      maxSurge: 0
+      maxSurge: 1
-      maxUnavailable: 1
+      maxUnavailable: 0
   selector:
     matchLabels:
       app: guacamole
@@ -159,7 +159,7 @@ metadata:
     app: guacamole
     component: guacd
 spec:
-  replicas: 1
+  replicas: 2
   selector:
     matchLabels:
       app: guacamole

apps/teslamate/manifests/cnpg-cluster.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: teslamate
 spec:
   imageName: ghcr.io/cloudnative-pg/postgresql:16
-  instances: 1
+  instances: 2
 
   # Resource limits to prevent OOM
   resources:

infrastructure/kiali/manifests/kiali-cr.yaml

@@ -9,7 +9,7 @@ spec:
   deployment:
     namespace: istio-system
     cluster_wide_access: true
-    replicas: 1
+    replicas: 2
     pod_labels:
       sidecar.istio.io/inject: "true"
       istio.io/dataplane-mode: "none"

infrastructure/prometheus/values.yaml

@@ -73,6 +73,8 @@ prometheus:
 
 alertmanager:
   enabled: true
+  alertmanagerSpec:
+    replicas: 2
 
 # Disable node-exporter due to PodSecurity restrictions
 prometheus-node-exporter: