detail

The cldkctl guard detail command displays detailed information about a specific Guard in your project. This command provides the Guard’s project ID, name, namespace, endpoint selector, and configuration details for ingress and egress rules. It is useful for verifying Guard settings, traffic permissions, and applied policies.

Usage

cldkctl guard detail [flags]

Aliases

detail, info

Steps

Follow the steps below to run and view the result of this command:

1. Run the following command in your terminal, and replace <guard_name> with the name of the Guard you want to inspect:

./cldkctl guard detail --name <guard_name>

1. If your Guard belongs to a specific namespace, include the --namespace flag to ensure accurate results.

./cldkctl guard detail -n <guard_name> -s <namespace>

1. Wait a few seconds for the system to fetch the Guard information.

2. Review the detailed output, which contains the Guard metadata and configuration for ingress and egress rules.

Column	Description
Detail Guard
Project ID	The unique identifier of the project where the Guard is deployed.
Name	The name of the Guard resource.
Namespace	The Kubernetes namespace in which the Guard resides.
Endpoint Selector	Label selector used to match workloads under this Guard.
Ingress Deny	Indicates whether all other unspecified incoming traffic is denied.
Egress Deny	Indicates whether all other unspecified outgoing traffic is denied.
Guard Ingress / Guard Egress
Type	Defines the rule behavior that determines how traffic is handled.
Selector	Specifies the target label or endpoint affected by the rule.
Port	Indicates which port or range of ports the rule applies to. If empty, the rule applies to all ports.
Exception	Lists any exclusions or exceptions to the rule, allowing certain traffic even when general restrictions are applied.

Flags

1. This command supports global flags. Refer to the Global Flags section for details.

Flag	Description
-h, --help	Help for the guard detail command.