Thanks, yes I did read that, I suspect my local proof of concept worked without the wireguard setting because I had the k3 server running in a digital ocean VPS but 2 worker nodes on my local network where they could communicate with each other. I did have the server running agentless already.
Do you know if the official docker rancher/k3s images support wireguard or are there are addition steps required to get that working? I feel like I tried at some point and it didnt work out but didnt spend too much time on it.