trying to put both arguments into the apiserver, see which error it ll throw

roles/rke2/templates/config.yaml.j2

@@ -38,7 +38,7 @@ cloud-provider-name: "{{ cloud_provider_name }}"
 resolv-conf: "{{ resolv_conf_server }}"
 {# disable-cloud-controller: true #}
 write-kubeconfig-mode: "0644"
-kube-apiserver-arg: "--feature-gates=ServiceAccountIssuerDiscovery=true,JobTrackingWithFinalizers=true,PodSecurity=true"
+kube-apiserver-arg: "--feature-gates=ServiceAccountIssuerDiscovery=true,JobTrackingWithFinalizers=true,PodSecurity=true --enable-admission-plugins=NodeRestriction,PodSecurityPolicy,PodNodeSelector,PodTolerationRestriction"