Bare-Metal Kubernetes HA: Floating IPs Over BGP With Cilium and UniFi's UCG-Fiber

Two floating LoadBalancer IPs over BGP on a 3-node k3s cluster - one fronting Traefik, one fronting the Kubernetes API server through cilium-envoy with active health checks. Full ansible + Helm config, and the Cilium 1.19 externalTrafficPolicy gotcha that silently broke the apiserver path.