Strike that, I'm dumb. Those clusters were Rancher so I had a 3 master cluster hosting Rancher on the same 5 physical nodes next to the 8 node downstream cluster (all clusters RKE2). I did have issues at times, but a lot of that was leaving SELinux enforcing before it was quite production supported for RKE2 and other similar decisions. Things seemed ok after getting a successful setup, though.