saas to k8s behind private ip no public url

how to deploy to k8s thats in private ip internal vpn but no public control plane
the gitlab k8s integration agent is one solution ,if not this method ,
if runner is on our vpn can reach k8s internal ip ,can use config and deploy with kubectl

if autodevops would work as well internal vpn ?