> ## Documentation Index
> Fetch the complete documentation index at: https://docs.controlplane.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a Workload

> Deploy containerized applications step by step via the Console or CLI. Covers container setup, identity assignment, scaling options, and firewall rules.

## Overview

Follow the steps below to create a [workload](/reference/workload) within your [GVC](/reference/gvc).

## Prerequisites

* Review the [workload](/reference/workload) reference page.
* Have [permissions](/reference/policy#permissions) to create a [workload](/reference/workload).
* Optional: Install the [CLI](/cli-reference/installation).

## Create using the Console

1. Create a new workload using one of the following methods:
   * Click `Workloads` in the left menu, then click `New`.
   * Click the `Create` dropdown in the upper right corner and select `Workload`.
2. Enter a unique name, an optional description, and select the GVC where the workload will be created.
3. Click `Options` to configure workload settings. For details, see [workload general settings](/reference/workload/general).
4. Click `Containers` to configure the container image, ports, commands, environment variables, and mounted files. For details, see [workload containers](/reference/workload/containers).
5. Click `Identity` and select one of the available [identities](/reference/identity). If no identities are defined, leave this field blank.
6. Click `Firewall` to configure firewall settings for the workload. For details, see [workload firewall settings](/reference/workload/firewall).
7. Click `Load Balancer` to configure load-balancing settings for the workload. For details, see [workload load balancing](/reference/workload/load-balancing).
8. Click `Advanced Settings` to configure additional workload settings. For details, see [workload general settings](/reference/workload/general).
9. Click `Sidecar | Envoy` to configure sidecar and Envoy settings for the workload. For details, see [workload JWT authentication](/reference/workload/jwt-auth).

<Tip>
  Depending on the requirements of your container, the firewall options can be configured to allow either or both inbound and outbound requests.

  If your container will be accepting requests from the Internet, verify that the `All Inbound Requests Allowed` switch is turned on or enter the expected CIDRs.

  If your container requires Internet access, verify that the `All Outbound Requests Allowed` switch is turned on or enter the expected CIDRs or hostnames in their respective text boxes.
</Tip>

10. Optionally, click `Tags` and enter any [tags](/core/misc#tags).
11. Click `Create`.

The workload summary page is then shown.

After a few moments, if the image is deployed successfully, the `Health` status will show `Ready`.

You can click the `Canonical Endpoint (Global)` link to open it in a new tab.

## Create using the CLI

Refer to the [workload create](/cli-reference/commands/workload#workload-create) command for details and examples.