I0424 03:31:34.340065 1 serving.go:348] Generated self-signed cert in-memory I0424 03:31:34.643018 1 controllermanager.go:189] "Starting" version="v1.28.13" I0424 03:31:34.643037 1 controllermanager.go:191] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0424 03:31:34.644308 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0424 03:31:34.644396 1 secure_serving.go:213] Serving securely on [::]:10257 I0424 03:31:34.644521 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0424 03:31:34.644620 1 leaderelection.go:250] attempting to acquire leader lease kube-system/kube-controller-manager... I0424 03:31:34.644724 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0424 03:31:49.723502 1 event.go:307] "Event occurred" object="kube-system/kube-controller-manager" fieldPath="" kind="Lease" apiVersion="coordination.k8s.io/v1" type="Normal" reason="LeaderElection" message="instance_18f88f5a-160e-4b1e-98c0-7959e4706fcf became leader" I0424 03:31:49.723922 1 leaderelection.go:260] successfully acquired lease kube-system/kube-controller-manager E0424 03:31:58.250020 1 leaderelection.go:332] error retrieving resource lock kube-system/kube-controller-manager: Get "https://199.204.45.116:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/kube-controller-manager?timeout=5s": dial tcp 199.204.45.116:6443: connect: connection refused E0424 03:32:00.175781 1 controllermanager.go:235] "Error building controller context" err="failed to wait for apiserver being healthy: timed out waiting for the condition: failed to get apiserver /healthz status: forbidden: User \"system:kube-controller-manager\" cannot get path \"/healthz\""