apiVersion: v1
clusters:
- cluster:
    certificate-authority: external-ca.pem
    server: https://localhost:6443
    insecure-skip-tls-verify: false  # Same as external.kubeconfig but with explicit false here.
  name: local
contexts:
- context:
    cluster: local
    namespace: default
    user: user
  name: Default
current-context: Default
kind: Config
preferences: {}
users:
- name: user
  user:
    client-certificate: external-cert.pem
    client-key: external-key.rsa