For no 2, in k8s, you can use MetalLB. Then the service will be of type LoadBalancer and you won’t have to create an ingress.
DuckDuckGo forces TLS while google doesn’t, so you can use IE5 or an old Safari with Google, but not with DDG.
In case OP doesn’t know, if a repo hasn’t got a licence it’s implied it’s licensed under "all rights reserved", so not open source! You need to https://choosealicense.com
Standard Ebooks - A curated and entirely free repository of public domain ebooks, carefully converted by volunteers to be the best digital version possible
The control plane, I guess…