>istioctl</code> tool.
It can be disabled by setting the environment variable <code>ENABLE_DEBUG_ON_HTTP</code> to
false as mentioned in the <a href=/v1.20/docs/ops/best-practices/security/#control-plane>Security Best
Practices</a>
guide. Additionally, in an upcoming version (1.11), this debug endpoint will
be secured by default and a valid Kubernetes service account token will be
required to gain access.</p><h3 id=lack-of-security-related-documentation>Lack of security related documentation</h3><p>The repo