Update container timezone to Europe/Moscow, correct PostgreSQL data directory path, adjust TLS key file permissions, and extend health check timeouts to accommodate slower startup environments.
Replace inline JSON string definitions with native YAML syntax for Kubernetes resource manifests in helm.yml, improving readability and maintainability while preserving identical resource configurations.
Add self-signed ClusterIssuer and test Certificate deployment to cert_manager role for verifying cert-manager functionality, while refactoring uyuni role to use self-signed issuer locally instead of external Let's Encrypt references and introduce database credential secrets generation.
Remove duplicated helm install tasks from main.yml and centralize them in helm.yml, simplifying the role structure and reducing redundancy by consolidating OCI registry and local chart installation paths into a single file.
Remove custom changed/failed logic for helm repo add and separate repo update step, improving playbook reliability by relying on helm's built-in idempotency and reducing false positives during dry-run execution
Introduce cert-manager role and a dedicated playbook for automated certificate management setup, complementing the newly restructured uyuni role for comprehensive infrastructure automation.
The Uyuni Helm chart files under `roles/uyuni/files/uyuni/server-helm/` have been removed from the repository as they are no longer needed in this deployment inventory. This change reflects a structural adjustment to externalize or re-architect the Helm chart management for Uyuni server deployments.
Added new playbook `setup_metrics_server.yml` and standalone role `roles/metrics_server/` to centralize Kubernetes metrics server deployment and configuration, separating concerns from the main uyuni role for modularity and reuse.
- rename manager node and update host FQDNs in inventory
- enable multiple worker nodes by commenting out secondary disk
- standardize k8s configuration file paths with numeric prefixes
- disable k9s permissions step in manager role
- upgrade Longhorn chart to v1.12.0 and Traefik chart to v41.0.2
- update Traefik port_map with protocol and add forgejo service
- refine Traefik logging configuration to use new JSON format
- increase Longhorn disk probe retries and delays
- add placeholder directory for k8s_manager files
- set ansible_user to 'mrwho' and disable SSH password authentication
- upgrade k8s_version to 1.36 in all.yml (removed from control_plane.yml)
- reduce traefik ingress routes to only k8s-dashboard and longhorn-ui with HTTPS
- update host IP addresses to 172.20.21.x subnet
- configure longhorn disk for k8s-worker-01
