This message was deleted.

we generally recommend disabling firewalld/ufw with k3s; it can be difficult to poke all the correct holes

Protip: firewalld is old tech. Kubernetes network policies (yes k3s supports them) can provide just as much security if not more. Firewalld and your CNI conflict with writes to iptables and both will break.

Thanks - that helps alot - I (we) knew it was something along those lines - really appreciate the quick response.