Installing the k3s agent machine here, but want to keep firewalld running. Based on documentation and a hunch, would this be enough? or too much? Would all communication be on the flannel interface or should i allow these ports on eth0 interface instead?

sudo firewall-cmd --zone=trusted --add-interface=flannel.1 --permanent
sudo firewall-cmd --zone=trusted --add-masquerade --permanent
sudo firewall-cmd --zone=trusted --add-port=6443/tcp --permanent
sudo firewall-cmd --zone=trusted --add-port=10250/tcp --permanent
sudo firewall-cmd --zone=trusted --add-port=8472/udp --permanent
sudo firewall-cmd --zone=trusted --add-port=51820/udp --permanent
sudo firewall-cmd --zone=trusted --add-port=51821/udp --permanent
sudo firewall-cmd --reload