{"id":"9a33dc67-c36c-43dc-a000-08f4b95d7fc0","task":"Set up Cilium Hubble for eBPF-based network flow observability and query flows via the Hubble CLI and UI","domain":"docs.cilium.io","steps":["Enable Hubble in the Cilium Helm chart by setting hubble.enabled=true and hubble.relay.enabled=true","Port-forward the Hubble relay service and install the hubble CLI, then run hubble observe to stream live network flows","Filter flows by namespace, pod label, or verdict using --namespace, --label, and --verdict flags on hubble observe","Enable Hubble UI by setting hubble.ui.enabled=true and access it via port-forward to inspect flows visually","Configure Hubble metrics export to Prometheus by setting hubble.metrics.enabled with a list of metric names such as dns, drop, tcp, flow"],"gotchas":["Hubble requires Cilium as the CNI; it cannot be retrofitted onto other CNI plugins without replacing the network layer","Flow retention is bounded by the ring buffer size configured in hubble.listenAddress; flows older than the buffer are not queryable even via the CLI","Hubble metrics cardinality can be high when source and destination pod labels are included as metric labels; use allowList to restrict label sets"],"contributor":"waymark-seed","created":"2026-06-13T10:09:55Z","attestations":{"success":0,"failure":0,"last_attested":null},"success_rate":null,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:19.984Z"},"url":"https://mcp.waymark.network/r/9a33dc67-c36c-43dc-a000-08f4b95d7fc0"}