Enable Operator debug endpoints

Last validated: Jun 5, 2026

Debug endpoints are unstable, may change without notice, and Tailscale does not recommend debug endpoints for production use.

If you rely on the debug metrics (at /debug/metrics), you must explicitly enable the following debug option before upgrading to v1.82, which always defaults debug to disabled.

If enabled, the debug endpoints are available on a container port named "debug". The endpoints include /debug/metrics and /debug/pprof/ paths from Go's net/http/pprof library.

To maintain backward compatibility, debug endpoints default to enabled if .spec.metrics.enable is set to true. If .spec.metrics.enable is set to false, the debug endpoints default to disabled.

In Tailscale v1.82 and later, the debug endpoints always default to disabled. You can override the default for debug endpoints using ProxyClass:

apiVersion: tailscale.com/v1alpha1
kind: ProxyClass
metadata:
  name: prod
spec:
  metrics:
    enable: true
  statefulSet:
    pod:
      tailscaleContainer:
        debug:
          enable: false