单独打包ks-apiserver启动报错

场景是在原有k8s环境下只想用ks-apiserver，编写的yaml文件是

apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: test-ns
  name: ks-apiserver
  labels:
    app: ks-apiserver
    tier: backend
    version: v1.0.0
spec:
  replicas: 1
  selector:
    matchLabels:
      app: ks-apiserver
      tier: backend
      version: v1.0.0
  template:
    metadata:
      labels:
        app: ks-apiserver
        tier: backend
        version: v1.0.0
    spec:
      containers:
        - name: ks-apiserver
          image: 'ks-apiserver-local:v1.0.0'
          command:
            - ks-apiserver
            - '--logtostderr=true'
          ports:
            - containerPort: 9090
              protocol: TCP
          volumeMounts:
            - name: docker-sock
              mountPath: /var/run/docker.sock
            - name: ks-router-config
              mountPath: /etc/kubesphere/ingress-controller
            - name: kubesphere-config
              mountPath: /etc/kubesphere/
            - name: host-time
              mountPath: /etc/localtime
          livenessProbe:
            httpGet:
              path: /lapis/version
              port: 9090
              scheme: HTTP
            initialDelaySeconds: 15
            timeoutSeconds: 15
            periodSeconds: 10
            successThreshold: 1
            failureThreshold: 8
          imagePullPolicy: IfNotPresent
      restartPolicy: Always
      affinity:
        nodeAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
            - weight: 100
              preference:
                matchExpressions:
                  - key: node-role.kubernetes.io/master
                    operator: In
                    values:
                      - ''
      volumes:
        - name: docker-sock
          hostPath:
            path: /var/run/docker.sock
            type: ''
        - name: ks-router-config
          configMap:
            name: ks-router-config
            defaultMode: 420
        - name: kubesphere-config
          configMap:
            name: kubesphere-config
            defaultMode: 420
        - name: host-time
          hostPath:
            path: /etc/localtime
            type: ''
---
apiVersion: v1
kind: Service
metadata:
  namespace: test-ns
  name: ks-apiserver
  labels:
    app: ks-apiserver
    tier: backend
    version: v1.0.0
spec:
  ports:
    - protocol: TCP
      port: 80
      targetPort: 9090
  selector:
    app: ks-apiserver
    tier: backend
    version: v1.0.0
  type: NodePort

日志显示
这里是需要在哪放开权限还是说加载k8s配置文件失败导致的呢