Update container timezone to Europe/Moscow, correct PostgreSQL data directory path, adjust TLS key file permissions, and extend health check timeouts to accommodate slower startup environments.
Replace inline JSON string definitions with native YAML syntax for Kubernetes resource manifests in helm.yml, improving readability and maintainability while preserving identical resource configurations.
Add self-signed ClusterIssuer and test Certificate deployment to cert_manager role for verifying cert-manager functionality, while refactoring uyuni role to use self-signed issuer locally instead of external Let's Encrypt references and introduce database credential secrets generation.
Remove duplicated helm install tasks from main.yml and centralize them in helm.yml, simplifying the role structure and reducing redundancy by consolidating OCI registry and local chart installation paths into a single file.
Introduce cert-manager role and a dedicated playbook for automated certificate management setup, complementing the newly restructured uyuni role for comprehensive infrastructure automation.