Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@ansible/roles/hv-metrics-server/files/dashboards/bastion-dashboard.json`:
- Around line 496-503: The "Network Interfaces" row currently has "title":
"Network Interfaces" with "y": 54 causing a large gap after Disk I/O; update
this row's "y" from 54 to the correct value (e.g., 36) and then shift all
dependent panels that follow (the Network panels and the subsequent "Mirror
Registry" row and its panels) up by the same delta so the Dashboard layout is
contiguous; locate the JSON objects with "title": "Network Interfaces" and
"title": "Mirror Registry" and adjust their "gridPos.y" (and any panels whose
gridPos.y falls between the old and new positions) to remove the gap.

In `@ansible/roles/hv-metrics-server/tasks/main.yaml`:
- Around line 91-120: The registry traffic monitoring block runs
registry-traffic-collector.sh which expects
hv_metrics_server_bastion_exporter_textfile_dir to exist but that directory is
only created when hv_metrics_server_enable_bastion_exporter is true; either
ensure the directory is created inside the Registry traffic monitoring block or
gate the block on hv_metrics_server_enable_bastion_exporter as well.
Specifically, update the "Registry traffic monitoring block" (tasks that render
registry-traffic-collector.sh, registry-traffic-collector.service,
registry-traffic-collector.timer and run the collector) to either add a task
that creates the directory hv_metrics_server_bastion_exporter_textfile_dir (use
file/mode/owner/group) before rendering templates and running the script, or add
the additional when: hv_metrics_server_enable_bastion_exporter condition to the
block to prevent running without the Bastion exporter enabled.

In
`@ansible/roles/hv-metrics-server/templates/registry-traffic-collector.timer.j2`:
- Line 2: Description text in the registry-traffic-collector.timer unit is
inconsistent with the timer interval; either update the Description to reflect
the configured OnUnitActiveSec=5s or change OnUnitActiveSec to 15s if 15s was
intended. Edit the registry-traffic-collector.timer.j2 template: locate the
Description=... line and the OnUnitActiveSec=... setting and make them
consistent (e.g., set Description="Collect mirror registry traffic metrics every
5 seconds" when keeping OnUnitActiveSec=5s, or change OnUnitActiveSec to 15s to
match the current description).

In `@docs/hv-metrics.md`:
- Line 24: Update the table row describing hv-metrics-server to fix the grammar
mismatch "a node-exporter containers" by changing it to either "a node-exporter
container" (singular) or "node-exporter containers" (drop the article) so the
description for hv-metrics-server / Bastion reads consistently with existing
docs formatting.

---

Nitpick comments:
In `@ansible/roles/hv-metrics-server/tasks/main.yaml`:
- Around line 118-120: The one-shot init task using ansible.builtin.command
(cmd: "{{ hv_metrics_server_work_dir }}/registry-traffic-collector.sh") is
non-idempotent; update the task to avoid always reporting changed by gating the
command with creates pointing to the generated file (registry_traffic.prom) or
by adding changed_when: false so re-runs are no-op; ensure you reference the
same hv_metrics_server_work_dir and registry-traffic-collector.sh invocation
when adding the creates/changed_when condition.