Create with Form

On the Deka Guard page, click the + Create Guard button and select Create with Form.

The Create Guard page will be displayed. Complete the required fields, including Name, Namespace, and Endpoint Selector.

The Endpoint Selector section is used to define the target pod for the rule by using a label selector. In this example, use app=web-app as the label selector, then click Add.

Configure the global options for Ingress Deny or Egress Deny.

When Ingress Deny is enabled, all incoming traffic to the selected endpoint is blocked. When Egress Deny is enabled, all outgoing traffic from the selected endpoint is blocked. To allow specific traffic, add a CIDR or Selector rule using the New Rule button under the Ingress Deny or Egress Deny section. This guide uses an example of adding a rule to Ingress Deny. Click New Rule.

The Create Ingress window will be displayed. Select the desired Type.

If Selector is selected, only the Selector and Port fields are displayed.

If CIDR is selected, the Selector, Port, and Exception fields are displayed. After completing the configuration, click Add.

Click Submit to create the Deka Guard.

A notification stating "Guard has been successfully created." will appear when the Deka Guard is successfully created in Service Portal Cloudeka.