Access k8s inside NAT

scp ${SERVERIP}:~/.kube/config ./ciconfig

• add insecure-skip-tls-verify: true
• remove certificate-authority-data in cluster

apiVersion: v1
clusters:
- cluster:
    insecure-skip-tls-verify: true
    server: https://{IP}:6443
  name: cluster.local