> For the complete documentation index, see [llms.txt](https://docs.cloudeka.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cloudeka.ai/cloudeka-api-list/command-reference/cldkctl-guard/create-ingress.md).

# create-ingress

The cldkctl guard create-ingress command creates an ingress rule within a Guard in your project. This command allows you to define inbound traffic restrictions for workloads, specifying the namespace, endpoint selector, and whether to deny all ingress traffic.

## Usage

```
cldkctl guard create-ingress [flags]
```

## Aliases

```
create-ingress, add-ing
```

## Steps

Follow the steps below to run and view the result of this command:

1. Run the following command in your terminal:

```
cldkctl guard create-ingress
```

<figure><img src="/files/EVuivpY6V39aq1nZCKvH" alt=""><figcaption></figcaption></figure>

2. When prompted, select the Namespace where the Guard will be created.
3. Enter the Endpoint Selector, using one or more labels in key-value format

<figure><img src="/files/gak5MNH5v9VpasrjacZ8" alt=""><figcaption></figcaption></figure>

4. Confirm whether you want to deny all incoming traffic for the Guard. Select Confirm to deny all ingress traffic, or Cancel to allow traffic unless explicitly restricted.

<figure><img src="/files/IyRCumbDerkEDlzmkz4L" alt=""><figcaption></figcaption></figure>

5. Wait for the system to process the request.
6. Once the process is successful, the terminal displays the message “✔ Guard deny all ingress has been successfully created”.

## Flags

{% hint style="info" %}

1. This command supports global flags. Refer to the Global Flags section for details.
   {% endhint %}

| Flag                            | Description                                |
| ------------------------------- | ------------------------------------------ |
| -e, --endpoint\_selector string | Specify the endpoint selector.             |
| -h, --help                      | Help for the guard create-ingress command. |
| -n, --namespace string          | Specify the namespace.                     |