I'm looking into a managed kubernetes service. At my prior job we used kubeadm+capi, but the control plane situation was dual-managed where the customer can access the pods rather than cloud-managed (like EKS). I'm curious if k3s has seen success in production running with disable-agent. The biggest workload might be 1000 nodes. Seems to be working fine in my test of 30ish nodes but not sure of any gotchas. The benefit here is the control plane is hidden (I know it's possible with guide "kubernetes the hard way") but seems k3s already offers this out-of-the-box. Also looked at gardener but seems quite complex

write-kubeconfig-mode: "0644"
cluster-init: true
disable-cloud-controller: true
disable-kube-proxy: true
disable-helm-controller: true
disable-network-policy: true
disable-agent: true
flannel-backend: none
cluster-cidr: "192.168.0.0/16"