We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent bfa4e00 commit eeeb399Copy full SHA for eeeb399
bpf/kmesh/workload/include/authz.h
@@ -574,6 +574,9 @@ int policies_check(struct xdp_md *ctx)
574
}
575
policy = map_lookup_authz(policyId);
576
if (!policy) {
577
+ // Currently, authz in xdp only support ip and port,
578
+ // if any principal or namespace type policy is configured,
579
+ // we need to tailcall to userspace.
580
if (match_ctx->need_tailcall_to_userspace) {
581
bpf_tail_call(ctx, &map_of_xdp_tailcall, TAIL_CALL_AUTH_IN_USER_SPACE);
582
return XDP_PASS;
0 commit comments