# create-egress
The cldkctl guard command creates an egress rule within a Guard in your project. This command allows you to define outbound traffic restrictions for workloads by specifying the namespace, endpoint selector, and whether to deny all egress traffic
## Usage
```
cldkctl guard create-egress [flags]
```
## Aliases
```
create-egress, add-eg
```
## Steps
Follow the steps below to run and view the result of this command:
1. Run the following command in your terminal:
```
./cldkctl guard create-egress
```
2. When prompted, select the Namespace where the Guard will be created.
3. Enter the Endpoint Selector, using one or more labels in key-value format.
4. Confirm whether you want to deny all outgoing traffic for the Guard. Select Confirm to deny all egress traffic, or Cancel to allow traffic unless explicitly restricted.
5. Wait for the system to process the request.
6. Once the process is successful, the terminal displays the message **“✔ Guard deny all egress has been successfully created”.**
## Flags
{% hint style="info" %}
This command supports global flags. Refer to the Global Flags section for details
{% endhint %}
| Flag | Description |
| ------------------------------- | ----------------------------------------- |
| -e, --endpoint\_selector string | Specify the endpoint selector. |
| -h, --help | Help for the guard create-egress command. |
| -n, --namespace string | Specify the namespace. |
