sudo k3d cluster create $1 \
  --image ${IMAGE} \
  --volume "$(pwd)/ca-bundle.crt:/etc/ssl/certs/ca-bundle.crt" \
  -p "2011:32011/tcp@server:0" \
  -p "29786:30786/tcp@server:0"

here's where i expose the port:

$ cat service.yaml 
apiVersion: v1
kind: Service
metadata:
  labels:
    app: vpn-proxy
  name: vpn-proxy
spec:
  type: NodePort
  ports:
  - name: proxy-port
    nodePort: 32011
    port: 2011
    protocol: TCP
    targetPort: 3128
  - name: vpn-callback
    nodePort: 30786
    port: 29786
    protocol: TCP
    targetPort: 29786
  selector:
    app: vpn-proxy