VRF and zone based firewall

Development
1

What is the correct way to assign a interface inside a VRF to a Zone with the current implementation?

Should I assign the interface eth0 or the VRF interface?