So terraform creates the cluster, DNS and VPC. Then k8s runs pretty much everything.
Mainly just kustomize piped into kube apply.
But, but, but. Having to a create a one-off database migration script imperatively.
We used K8S on a large project and I felt like it really, really wasn't necessary.