CNI failed to setup DNAT rules for our Podman containers, leaving them unreachable.
IPv6 privacy extensions are great for personal devices, not so much on a server.