I’ve found how to do it with --disable-identity flag, but this will require a restart of the pod.
And I just wonder, is there a way to disable mtls at the runtime without pod restart? This will be helpful if something has happened with the mtls(e.g. expired certificates).
There is not a good way to disable mTLS. The expectation is that you keep mTLS enabled and ensure TLS certificates are rotated as necessary. We provide some free tools to help with this.