Assorted kubectl commands (getting logs, trying to exec a shell on a container), fail with an i/o timeout because they are trying to connect over the private ip.

Ex:

Error from server: Get https://10.136.191.197:10250/containerLogs/kube-system/csi-do-node-ttr6h/csi-do-plugin: dial tcp 10.136.191.197:10250: i/o timeout

Is there some config somewhere I need to change to get kubectl to stop trying to use the private IPs? I haven’t installed any networking plugins but it looks like Cilium comes installed by default, with DO managed k8s.