RKE2 cloud-controller-manager cant reach kube api server, tcp 127.0.0.16443 connect: connection refused. Can you help me?

I0921 07:48:04.499086       1 serving.go:387] Generated self-signed cert in-memory
I0921 07:48:04.685141       1 serving.go:387] Generated self-signed cert in-memory
I0921 07:48:05.058202       1 controllermanager.go:169] Version: v1.29.3-k3s1
I0921 07:48:05.064505       1 requestheader_controller.go:169] Starting RequestHeaderAuthRequestController
I0921 07:48:05.064654       1 shared_informer.go:311] Waiting for caches to sync for RequestHeaderAuthRequestController
I0921 07:48:05.064556       1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0921 07:48:05.064766       1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0921 07:48:05.064570       1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0921 07:48:05.064886       1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0921 07:48:05.065931       1 secure_serving.go:213] Serving securely on 127.0.0.1:10258
I0921 07:48:05.065980       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0921 07:48:05.067792       1 leaderelection.go:250] attempting to acquire leader lease kube-system/rke2-cloud-controller-manager...
I0921 07:48:05.165004       1 shared_informer.go:318] Caches are synced for RequestHeaderAuthRequestController
I0921 07:48:05.165178       1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0921 07:48:05.165225       1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
E0921 10:23:45.014675       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:23:49.194371       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:23:51.572610       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:23:55.031845       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:23:58.502866       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:24:01.950612       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:24:04.238134       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:24:07.938182       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:24:11.111673       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:24:13.758526       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:24:17.737175       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:24:21.622091       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:24:24.751748       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: Get "<https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/rke2-cloud-controller-manager?timeout=5s>": dial tcp 127.0.0.1:6443: connect: connection refused
E0921 10:24:29.220193       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: <http://leases.coordination.k8s.io|leases.coordination.k8s.io> "rke2-cloud-controller-manager" is forbidden: User "rke2-cloud-controller-manager" cannot get resource "leases" in API group "<http://coordination.k8s.io|coordination.k8s.io>" in the namespace "kube-system"
E0921 10:24:46.002224       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: <http://leases.coordination.k8s.io|leases.coordination.k8s.io> "rke2-cloud-controller-manager" is forbidden: User "rke2-cloud-controller-manager" cannot get resource "leases" in API group "<http://coordination.k8s.io|coordination.k8s.io>" in the namespace "kube-system"
E0921 10:25:05.952956       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: <http://leases.coordination.k8s.io|leases.coordination.k8s.io> "rke2-cloud-controller-manager" is forbidden: User "rke2-cloud-controller-manager" cannot get resource "leases" in API group "<http://coordination.k8s.io|coordination.k8s.io>" in the namespace "kube-system"
E0921 10:25:26.002996       1 leaderelection.go:332] error retrieving resource lock kube-system/rke2-cloud-controller-manager: <http://leases.coordination.k8s.io|leases.coordination.k8s.io> "rke2-cloud-controller-manager" is forbidden: User "rke2-cloud-controller-manager" cannot get resource "leases" in API group "<http://coordination.k8s.io|coordination.k8s.io>" in the namespace "kube-system"