Giving only certain parts of your architecture access to certain capabilities is far from a niche use case What is the "normal" best practice here then? I woul

Giving only certain parts of your architecture access to certain capabilities is far from a niche use case What is the "normal" best practice here then? I would just spin up multiple single-node k3s VM clusters and hook the AI k3s VM to the VPN and the others not.