I think you would want to deploy the netclient on each host (directly on the host, not in a container), and then configure calico to user the netmaker interface on all machines, sort of like this: https://www.netmaker.org/blog/deploy-distributed-kubernetes-clusters-with-wireguard-and-netmaker