Disable API Server NodePort and Configure kube-scheduler Resource Requests
Configure the kube-scheduler static pod with CPU resource requests based on node allocatable, and disable the NodePort access to the Kubernetes API server so it is only reachable via ClusterIP.