How traffic gets from my LAN to a pod: a MetalLB address pool, Traefik as the ingress layer, and Pi-hole handling DNS for every joeyaxtell.com subdomain on the network.
Standing up cert-manager with a Cloudflare DNS-01 solver, the three-stage evolution from plaintext secrets to Sealed Secrets, and the day I stopped waiting five minutes for a failed node to give up its pods.
Why I picked MicroK8s over k3s or kubeadm, the three-node cluster I built, and why Ansible didn't show up until the cluster already had workloads running on it.