tailscale/tsweb
Jason O'Donnell d948b78b23
tsweb: add TS_DEBUG_TRUSTED_CIDRS envknob to debug (#19283)
Add a new envknob that allows connections from trusted CIDR ranges
to access debug endpoints without Tailscale authentication. This is
useful for in-cluster scrapers like Prometheus that are not on a
tailnet, do not have static IP addresses and cannot use debug keys.

Fixes #19282

Signed-off-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com>
2026-04-08 18:47:52 -04:00
..
promvarz all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
varz all: use Go 1.26 things, run most gofix modernizers 2026-03-06 13:32:03 -08:00
debug_test.go tsweb: add TS_DEBUG_TRUSTED_CIDRS envknob to debug (#19283) 2026-04-08 18:47:52 -04:00
debug.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
log.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
pprof_default.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
pprof_js.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
request_id.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
tsweb_test.go cmd/vet: add subtestnames analyzer; fix all existing violations 2026-04-05 15:52:51 -07:00
tsweb.go tsweb: add TS_DEBUG_TRUSTED_CIDRS envknob to debug (#19283) 2026-04-08 18:47:52 -04:00