/events and /top/container endpoints does not require authentication

[demiph]

Describe the bug
I have spun up a VEBA instance and the bootstrap log completed fine. All pods are up and running, I am able to access the endpoints https://veba.instance/status, https://veba.instance/bootstrap. Those are authenticated endpoints, and require the VEBA root credentials to login but i find that the other endpoints https://veba.instance/event, and https://veba.instance/top/containers do not require any auth. I have tried this with incognito windows, and the result is the same

To Reproduce
Steps to reproduce the behavior:

1. Deploy VEBA instance
2. Ensure bootstrap is completed
3. Open https://veba.instance/event in incognito session

Expected behavior
There should be a prompt for authentication before accessing VMware events or container statuses

Version (please complete the following information):

• VEBA Form Factor: Appliance
• VEBA Version: 0.7.5

[github-actions]

Howdy 🖐   demiph ! Thank you for your interest in this project. We value your feedback and will respond soon.