Challenges: 1. etcd booting before bootkube meant I missed certs 2. etcd can run without certs, but managing docker network over static pod manifests might be tricky :fingers_crossed: