I0730 16:36:29.297658       1 server_linux.go:53] "Using iptables proxy"
I0730 16:36:29.432595       1 shared_informer.go:349] "Waiting for caches to sync" controller="node informer cache"
I0730 16:36:29.533279       1 shared_informer.go:356] "Caches are synced" controller="node informer cache"
I0730 16:36:29.533353       1 server.go:219] "Successfully retrieved NodeIPs" NodeIPs=["199.19.213.17"]
I0730 16:36:29.544868       1 conntrack.go:60] "Setting nf_conntrack_max" nfConntrackMax=262144
E0730 16:36:29.545016       1 server.go:256] "Kube-proxy configuration may be incomplete or incorrect" err="nodePortAddresses is unset; NodePort connections will be accepted on all local IPs. Consider using `--nodeport-addresses primary`"
I0730 16:36:29.580799       1 server.go:265] "kube-proxy running in dual-stack mode" primary ipFamily="IPv4"
I0730 16:36:29.580849       1 server_linux.go:392] "Detect-local-mode set to ClusterCIDR, but no cluster CIDR specified for primary IP family" ipFamily="IPv4" clusterCIDRs=null
I0730 16:36:29.580868       1 server_linux.go:132] "Using iptables Proxier"
I0730 16:36:29.587337       1 proxier.go:242] "Setting route_localnet=1 to allow node-ports on localhost; to change this either disable iptables.localhostNodePorts (--iptables-localhost-nodeports) or set nodePortAddresses (--nodeport-addresses) to filter loopback addresses" ipFamily="IPv4"
I0730 16:36:29.587647       1 server.go:527] "Version info" version="v1.34.0"
I0730 16:36:29.587689       1 server.go:529] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0730 16:36:29.588816       1 config.go:403] "Starting serviceCIDR config controller"
I0730 16:36:29.588858       1 shared_informer.go:349] "Waiting for caches to sync" controller="serviceCIDR config"
I0730 16:36:29.588875       1 config.go:200] "Starting service config controller"
I0730 16:36:29.588916       1 shared_informer.go:349] "Waiting for caches to sync" controller="service config"
I0730 16:36:29.588954       1 config.go:106] "Starting endpoint slice config controller"
I0730 16:36:29.589021       1 shared_informer.go:349] "Waiting for caches to sync" controller="endpoint slice config"
I0730 16:36:29.589109       1 config.go:309] "Starting node config controller"
I0730 16:36:29.589123       1 shared_informer.go:349] "Waiting for caches to sync" controller="node config"
I0730 16:36:29.589134       1 shared_informer.go:356] "Caches are synced" controller="node config"
I0730 16:36:29.690096       1 shared_informer.go:356] "Caches are synced" controller="service config"
I0730 16:36:29.690138       1 shared_informer.go:356] "Caches are synced" controller="endpoint slice config"
I0730 16:36:29.690199       1 shared_informer.go:356] "Caches are synced" controller="serviceCIDR config"
E0730 16:36:35.904613       1 reflector.go:205] "Failed to watch" err="endpointslices.discovery.k8s.io is forbidden: User \"system:serviceaccount:kube-system:kube-proxy\" cannot watch resource \"endpointslices\" in API group \"discovery.k8s.io\" at the cluster scope: RBAC: [clusterrole.rbac.authorization.k8s.io \"system:discovery\" not found, clusterrole.rbac.authorization.k8s.io \"system:service-account-issuer-discovery\" not found, clusterrole.rbac.authorization.k8s.io \"system:node-proxier\" not found, clusterrole.rbac.authorization.k8s.io \"system:public-info-viewer\" not found, clusterrole.rbac.authorization.k8s.io \"system:basic-user\" not found] - error from a previous attempt: read tcp 199.19.213.17:51704->199.204.45.222:6443: read: connection reset by peer" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.EndpointSlice"
E0730 16:36:35.904834       1 reflector.go:205] "Failed to watch" err="nodes \"controller-2\" is forbidden: User \"system:serviceaccount:kube-system:kube-proxy\" cannot watch resource \"nodes\" in API group \"\" at the cluster scope: RBAC: [clusterrole.rbac.authorization.k8s.io \"system:node-proxier\" not found, clusterrole.rbac.authorization.k8s.io \"system:public-info-viewer\" not found, clusterrole.rbac.authorization.k8s.io \"system:basic-user\" not found, clusterrole.rbac.authorization.k8s.io \"system:discovery\" not found, clusterrole.rbac.authorization.k8s.io \"system:service-account-issuer-discovery\" not found] - error from a previous attempt: read tcp 199.19.213.17:51690->199.204.45.222:6443: read: connection reset by peer" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node"
E0730 16:36:35.905029       1 reflector.go:205] "Failed to watch" err="services is forbidden: User \"system:serviceaccount:kube-system:kube-proxy\" cannot watch resource \"services\" in API group \"\" at the cluster scope: RBAC: [clusterrole.rbac.authorization.k8s.io \"system:node-proxier\" not found, clusterrole.rbac.authorization.k8s.io \"system:public-info-viewer\" not found, clusterrole.rbac.authorization.k8s.io \"system:basic-user\" not found, clusterrole.rbac.authorization.k8s.io \"system:discovery\" not found, clusterrole.rbac.authorization.k8s.io \"system:service-account-issuer-discovery\" not found] - error from a previous attempt: read tcp 199.19.213.17:51718->199.204.45.222:6443: read: connection reset by peer" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service"
E0730 16:36:35.905080       1 reflector.go:205] "Failed to watch" err="servicecidrs.networking.k8s.io is forbidden: User \"system:serviceaccount:kube-system:kube-proxy\" cannot watch resource \"servicecidrs\" in API group \"networking.k8s.io\" at the cluster scope: RBAC: [clusterrole.rbac.authorization.k8s.io \"system:basic-user\" not found, clusterrole.rbac.authorization.k8s.io \"system:discovery\" not found, clusterrole.rbac.authorization.k8s.io \"system:service-account-issuer-discovery\" not found, clusterrole.rbac.authorization.k8s.io \"system:node-proxier\" not found, clusterrole.rbac.authorization.k8s.io \"system:public-info-viewer\" not found] - error from a previous attempt: read tcp 199.19.213.17:51720->199.204.45.222:6443: read: connection reset by peer" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.ServiceCIDR"