Hello, I am facing errors on one of master node in Rancher. Does anyone know how to resolve this issue? Thanks

0607 14:02:05.757155      1 serving.go:348] Generated self-signed cert in-memory
 W0607 14:02:06.107438      1 requestheader_controller.go:193] Unable to get configmap/extension-apiserver-authentication in kube-system. Usually fixed by 'kubectl create rolebinding -n kube-system ROLEBINDING_NAME --role=extension-apiserver-authentication-reader --serviceaccount=YOUR_NS:YOUR_SA'
 unable to load configmap based request-header-client-ca-file: configmaps "extension-apiserver-authentication" is forbidden: User "system:kube-controller-manager" cannot get resource "configmaps" in API group "" in the namespace "kube-system"