The apiserver needs to open an outbound connection to the node when you do do

kubectl logs

or

kubectl exec

. If you’ve told it to use a proxy via HTTT_PROXY, it will do so. If you don’t want it to use a proxy for that, you should ensure your node CIDR block (192.19.0.0/24 or whatever) is in the NO_PROXY env var.