One problem you will run into is that the k3s certs will not include the Windows hostname/IP address, so you will need to disable certificate checking with

kubectl --insecure-skip-tls-verify …

for each command, which can become tiresome. You may be able to add the hostname/IP address to k3s via a provisioning script, but you can ask about that if the basic config is working, except for the X509 cert errors.