ExecStart=/usr/local/bin/kube-apiserver \
  --authorization-mode=Node,RBAC \
  --enable-admission-plugins=Initializers,DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,NamespaceLifecycle,NodeRestriction,PersistentVolumeClaimResize,ResourceQuota,ServiceAccount,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,Priority \
  --insecure-bind-address=0.0.0.0 \
  --advertise-address=192.168.0.233 \
  --bind-address=0.0.0.0 \
  --insecure-port=8080 \
  --secure-port=6443 \
  --allow-privileged=true \
 

vim /usr/lib/systemd/system/kube-apiserver.service

systemctl daemon-reload

systemctl restart kube-apiserver