# istio_59238.yaml
apiVersion: release-notes/v2
kind: bug-fix
area: security
issue: []
releaseNotes:
  - |
    **Added** the ability to specify authorized namespaces for debug endpoints when `ENABLE_DEBUG_ENDPOINT_AUTH=true`. Enable by
    setting `DEBUG_ENDPOINT_AUTH_ALLOWED_NAMESPACES` to a comma separated list of authorized namespaces. The system namespace
    (typically `istio-system`) is always authorized.