MetalLB

kubectl create secret generic -n metallb-system memberlist --from-literal=secretkey="$(openssl rand -base64 128)" --dry-run -o yaml | kubectl apply -f -

use ansible vault for secretkey.

• [CSI]: Container Storage Interface
• [IOMMU]: Input-Output Memory Management Unit. Used to virualize memory access for devices. See Wikipedia