Update .gitignore to include .env file and enhance README.md with instructions for deploying secrets. Refactor noble.yml to improve Kubernetes health check handling and update templates for error reporting. Modify cert-manager and metallb tasks to apply secrets from .env and adjust timeout settings. Clarify Newt installation requirements in tasks. These changes aim to streamline deployment processes and improve documentation clarity.

clusters/noble/apps/cert-manager/README.md

@@ -4,6 +4,10 @@
 
 **ACME (Let’s Encrypt)** uses **DNS-01** via **Cloudflare** for zone **`pcenicni.dev`**. Create an API token with **Zone → DNS → Edit** and **Zone → Zone → Read** (or use the “Edit zone DNS” template), then:
 
+**Option A — Ansible:** copy **`.env.sample`** to **`.env`** in the repo root, set **`CLOUDFLARE_DNS_API_TOKEN`**, run **`ansible/playbooks/noble.yml`** (or **`deploy.yml`**). The **cert-manager** role creates **cloudflare-dns-api-token** from `.env` after the chart installs.
+
+**Option B — kubectl:**
+
 ```bash
 kubectl -n cert-manager create secret generic cloudflare-dns-api-token \
   --from-literal=api-token='YOUR_CLOUDFLARE_API_TOKEN' \

clusters/noble/apps/metallb/README.md

@@ -32,7 +32,7 @@ Then restart MetalLB pods if they were failing (`kubectl get pods -n metallb-sys
    helm repo update
    helm upgrade --install metallb metallb/metallb \
      --namespace metallb-system \
-     --wait
+     --wait --timeout 20m
    ```
 
 2. Apply this folder’s pool and L2 advertisement: