I0519 20:05:09.643810 1 serving.go:348] Generated self-signed cert in-memory W0519 20:05:10.931484 1 requestheader_controller.go:193] Unable to get configmap/extension-apiserver-authentication in kube-system. Usually fixed by 'kubectl create rolebinding -n kube-system ROLEBINDING_NAME --role=extension-apiserver-authentication-reader --serviceaccount=YOUR_NS:YOUR_SA' W0519 20:05:10.931519 1 authentication.go:368] Error looking up in-cluster authentication configuration: configmaps "extension-apiserver-authentication" is forbidden: User "system:kube-scheduler" cannot get resource "configmaps" in API group "" in the namespace "kube-system": RBAC: [clusterrole.rbac.authorization.k8s.io "system:discovery" not found, clusterrole.rbac.authorization.k8s.io "system:kube-scheduler" not found, clusterrole.rbac.authorization.k8s.io "system:public-info-viewer" not found, clusterrole.rbac.authorization.k8s.io "system:basic-user" not found, clusterrole.rbac.authorization.k8s.io "system:volume-scheduler" not found] W0519 20:05:10.931531 1 authentication.go:369] Continuing without authentication configuration. This may treat all requests as anonymous. W0519 20:05:10.931538 1 authentication.go:370] To require authentication configuration lookup to succeed, set --authentication-tolerate-lookup-failure=false I0519 20:05:10.965412 1 server.go:154] "Starting Kubernetes Scheduler" version="v1.28.13" I0519 20:05:10.965447 1 server.go:156] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0519 20:05:10.967097 1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0519 20:05:10.967129 1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0519 20:05:10.967134 1 secure_serving.go:213] Serving securely on [::]:10259 I0519 20:05:10.967203 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0519 20:05:11.067500 1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0519 20:05:11.068027 1 leaderelection.go:250] attempting to acquire leader lease kube-system/kube-scheduler... I0519 20:05:11.114316 1 leaderelection.go:260] successfully acquired lease kube-system/kube-scheduler E0519 20:05:20.190136 1 leaderelection.go:332] error retrieving resource lock kube-system/kube-scheduler: Get "https://199.204.45.129:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/kube-scheduler?timeout=5s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) E0519 20:05:25.189844 1 leaderelection.go:332] error retrieving resource lock kube-system/kube-scheduler: Get "https://199.204.45.129:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/kube-scheduler?timeout=5s": context deadline exceeded I0519 20:05:25.189907 1 leaderelection.go:285] failed to renew lease kube-system/kube-scheduler: timed out waiting for the condition E0519 20:05:28.975221 1 server.go:242] "Leaderelection lost"