<p>I want to start develop for Kuberntes project. I wanted to debug the netwrok between the master and the worker.<br>
Currently they are using x509 certificates for SSL communication and I need to see this communication.  </p>

<p>I installed Kubernetes cluster on a linux machine with kubeadm and weave network plug in and I now want to disable the SSL network to be able to see all the traffic between them.  </p>

<p>I tried the steps describe in <a href="https://stackoverflow.com/a/52432007">this</a> answer and:  </p>

<ul>
<li>Removed <code>--insecure-port=0</code> from <code>/etc/kubernetes/manifests/kube-apiserver.yaml</code></li>
<li>Added <code>--insecure-bind-address=0.0.0.0</code> to <code>/etc/kubernetes/manifests/kube-controller-manager.yaml</code> and <code>/etc/kubernetes/manifests/kube-scheduler.yaml</code></li>
<li>Restart kubelet <code>service kubelet restart</code>  </li>
</ul>

<p>I created new deployment: <code>kubectl run nginx --image nginx</code> on the master and in the worker I run <code>tcpdump -i ens3 -w ./traffic.pcap</code>.  </p>

<p>The deployment failed to run.<br>
I checked the kubelet logs: <code>journalctl -u kubelet</code>:  </p>

<pre><code>Apr 01 12:16:57 master kubelet[10614]: E0401 12:16:57.238125   10614 pod_workers.go:190] Error syncing pod 26ead5e19e83a1d9426b732dc183b75d ("kube-controller-manager-master_kube-system(26ead5e19e83a1d9426b732dc183b75d)"), skipping: failed to "StartContainer" for "kube-controller-manager" with CrashLoopBackOff: "Back-off 5m0s restarting failed container=kube-controller-manager pod=kube-controller-manager-master_kube-system(26ead5e19e83a1d9426b732dc183b75d)"
Apr 01 12:16:59 master kubelet[10614]: E0401 12:16:59.238970   10614 pod_workers.go:190] Error syncing pod 448824ad8c321fa307186a36765b0ee4 ("kube-scheduler-master_kube-system(448824ad8c321fa307186a36765b0ee4)"), skipping: failed to "StartContainer" for "kube-scheduler" with CrashLoopBackOff: "Back-off 5m0s restarting failed container=kube-scheduler pod=kube-scheduler-master_kube-system(448824ad8c321fa307186a36765b0ee4)"  
</code></pre>

<p>How it is possible to disable Kubernetes SSL communication and debug it for development?  </p>

E235
<p>The scheduler and controller manager did not start after you added <code>--insecure-bind-address</code> because this flag is not supported by these two components. So you remove it and the deployment should work.</p>

<p>You can verify this by running below command to check logs and you should see an error <code>unknown flag: --insecure-bind-address</code></p>

<pre><code>kubectl logs kube-controller-manager-master_kube-system -n kube-system

kubectl logs kube-scheduler-master_kube-system -n kube-system
</code></pre>

<p>Edit:</p>

<p>For http communication between API Server and kubelet you can set <code>--kubelet-https</code> to false in API Server.</p>
