Apparently

1) There's a race condition between #tibyvmm and #networkd that prevents VMs from getting a DHCP reply fast enough (I'm so moving off networkd now)
and
2) cilium clustermesh is just fragile as fuck and requires manual rubbing in proper order for the clusters to regain peering.

The technology is scary.