Self-signed certs prevent kubectl from working

No that’s for a local machine to contact the cluster nodes/master