Get metrics w/o direct access to node's kubelet port


I have a setup where some Nodes are in a NATed environment, i.e. they can directly connect to the master but not vice versa. This is indentend and isn’t allowed to be changed. As for CNI, I’m using Weave Net which supports this kind of scenario (inter-Pod communication even if no incoming connects are possible).

The drawback seems to be that metrics can’t be retrieved, because the master Node can’t connect to those isolated Node’s Kubelet port 10250.

Is there any workaround possible to get metrics for those Nodes? Could I e.g. use the Container Network to route those requests?

Thanks in advance