Adding security policy in ztunnel environment (#100)

apache · Sep 20, 2024 · 5be4278 · 5be4278
1 parent 4f3b17e
commit 5be4278
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/ebpf/accesslog.proto b/ebpf/accesslog.proto
@@ -97,12 +97,19 @@ message ZTunnelAttachmentEnvironment {
     string real_destination_ip = 1;
     // how the environment detected
     ZTunnelAttachmentEnvironmentDetectBy by = 2;
+    // the security policy of the ztunnel communicate with upstream
+    ZTunnelAttachmentSecurityPolicy security_policy = 3;
 }
 
 enum ZTunnelAttachmentEnvironmentDetectBy {
     ZTUNNEL_OUTBOUND_FUNC = 0;
 }
 
+enum ZTunnelAttachmentSecurityPolicy {
+    MTLS = 0;
+    NONE = 1;
+}
+
 message ConnectionAddress {
     oneof address {
         // if the address is monitored under the local machine, then return the kubernetes