Now I am renew a certificate using kubeadm(kubernetes v1.16.x). But now when I check the port 6443 using this command in host machine:

[mia@K8SMaster1 .kube]$ sudo lsof -i:6443
[mia@K8SMaster1 .kube]$

the api server did not listening on port 6443, then I check the apiserver pod:

[mia@K8SMaster1 .kube]$ sudo docker ps|grep apiserver
048b602f5897        k8s.gcr.io/pause:3.1   "/pause"                 About an hour ago   Up About an hour                        k8s_POD_kube-apiserver-meowk8smaster1_kube-system_8ea2cd30c93c58fa0315896f694d9259_4

it is running fine. So why the pod did not bind host port? Because I could not access 6443 port of kubernetes apiserver, and I could not using kubectl to access cluster. I tried to using docker command to check the apiserver log output:

[mia@K8SMaster1 .kube]$ sudo docker logs 048b602f5897
[mia@K8SMaster1 .kube]$

nothing output. what should I do to fix it?