{"action":"opened","issue":{"url":"https://api.github.com/repos/cloudfoundry-incubator/cf-abacus/issues/276","repository_url":"https://api.github.com/repos/cloudfoundry-incubator/cf-abacus","labels_url":"https://api.github.com/repos/cloudfoundry-incubator/cf-abacus/issues/276/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry-incubator/cf-abacus/issues/276/comments","events_url":"https://api.github.com/repos/cloudfoundry-incubator/cf-abacus/issues/276/events","html_url":"https://github.com/cloudfoundry-incubator/cf-abacus/issues/276","id":141820733,"number":276,"title":"Abacus Hystrix and Eureka endpoints are not secured","user":{"login":"hsiliev","id":732222,"avatar_url":"https://avatars.githubusercontent.com/u/732222?v=3","gravatar_id":"","url":"https://api.github.com/users/hsiliev","html_url":"https://github.com/hsiliev","followers_url":"https://api.github.com/users/hsiliev/followers","following_url":"https://api.github.com/users/hsiliev/following{/other_user}","gists_url":"https://api.github.com/users/hsiliev/gists{/gist_id}","starred_url":"https://api.github.com/users/hsiliev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hsiliev/subscriptions","organizations_url":"https://api.github.com/users/hsiliev/orgs","repos_url":"https://api.github.com/users/hsiliev/repos","events_url":"https://api.github.com/users/hsiliev/events{/privacy}","received_events_url":"https://api.github.com/users/hsiliev/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/cloudfoundry-incubator/cf-abacus/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/cloudfoundry-incubator/cf-abacus/labels/Discussion","name":"Discussion","color":"d4c5f9"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-03-18T09:54:05Z","updated_at":"2016-03-18T09:54:05Z","closed_at":null,"body":"We expose /hystrix.stream and /health endpoints that are not secured. They expose a lot of information about the internals of Abacus pipeline.\r\n\r\nIMHO they should be secured with abacus.system token"}}