Two pieces of feedback. First, tutorials like this should include getting this running using TLS by default. Ideally there shouldn't be any reference to plain

Two pieces of feedback. First, tutorials like this should include getting this running using TLS by default. Ideally there shouldn't be any reference to plain http at all. Second, the DSL for Kube and Ambassador seem ridiculously complex for this. Maybe some explanation for what "imagePullPolicy: IfNotPresent" means? This kind of configuration harkens back to the myriad of Jboss XML files, just in a different format. For me personally, I get all the reasons why you'd want to use k8s, but for a "getting started" user, seeing this kind of required config -- rather than sensible defaults hidden away -- would get very discouraging. ("Why should I learn this DSL instead of just making sure I had a correct puppet setup?")