CI / CI (pull_request) Successful in 7m13s
- Replace 'kubectl get nodes' (cluster-scope, forbidden for ci-tekton-trigger SA) with 'kubectl get namespaces' (namespace-scoped, allowed) - Guard canary cleanup against empty POD_NAME to prevent 'resource name may not be empty' Fixes CI run #1023