fix(ci): use namespace-scoped kubeconfig check, guard empty pod name #38

2026-09-26T11:05:08Z

rock commented

2026-09-26 11:05:08 +00:00

Fixes CI run #1023 (job 1350).

Root cause: kubectl get nodes requires cluster-scope RBAC that ci-tekton-trigger SA lacks.

Fixes:

Replace kubectl get nodes with kubectl get namespaces (namespace-scoped, allowed)
Guard canary cleanup: skip kubectl delete when POD_NAME is empty (prevents resource name may not be empty)

Fixes CI run #1023 (job 1350). **Root cause:** `kubectl get nodes` requires cluster-scope RBAC that `ci-tekton-trigger` SA lacks. **Fixes:** 1. Replace `kubectl get nodes` with `kubectl get namespaces` (namespace-scoped, allowed) 2. Guard canary cleanup: skip `kubectl delete` when `POD_NAME` is empty (prevents `resource name may not be empty`)

rock added 1 commit 2026-09-26 11:05:08 +00:00

fix(ci): use namespace-scoped kubeconfig check, guard empty pod name

CI / CI (pull_request) Successful in 7m13s

Details

e4fed02809

- Replace 'kubectl get nodes' (cluster-scope, forbidden for ci-tekton-trigger SA)
  with 'kubectl get namespaces' (namespace-scoped, allowed)
- Guard canary cleanup against empty POD_NAME to prevent 'resource name may not be empty'

Fixes CI run #1023

rock merged commit 63ec2ddf68 into main

2026-09-26 11:05:18 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: riotpiao-poimen/homelab-frontend#38