"><h4>How to disable Auth on clients to access the Kubernetes API Server (or any control services that don't have Istio sidecar)?</h4></div></a><div id="collapse26" class="panel-collapse collapse"><div class="panel-body"><p>Starting with release 0.3, edit the <code>mtlsExcludedServices</code> list in Istio config map to contain the fully-qualified name of the API server (and any other control services for that matter). The default value of <code>mtlsExcludedServices</code> already contains <code>kubernetes.