openclaw: tune triage kubectl guidance

services/openclaw/configmap.yaml

@@ -99,12 +99,17 @@ data:
 
     - `kubectl get nodes -o wide`
     - `kubectl get pods -A -o wide`
+    - `kubectl get pods -A --field-selector status.phase!=Running,status.phase!=Succeeded -o wide`
     - `kubectl get events -A --sort-by=.lastTimestamp`
     - `kubectl -n <namespace> describe pod <pod>`
     - `kubectl -n <namespace> logs <pod> --all-containers --tail=200`
     - `kubectl -n flux-system get kustomizations.kustomize.toolkit.fluxcd.io`
     - `curl -sS "$VICTORIA_METRICS_URL/api/v1/query?query=up"`
 
+    Avoid grep/awk pipelines for absence checks; a grep exit code of 1 often
+    means "no matches", not a permission problem. Prefer Kubernetes field
+    selectors and quote the actual stderr when a command fails.
+
     Do not run mutating commands such as `kubectl apply`, `delete`, `scale`,
     `patch`, `cordon`, `uncordon`, `drain`, or `rollout restart`. Do not read
     Kubernetes Secret values. Draft repo changes or operator steps instead.

services/openclaw/deployment.yaml

@@ -20,6 +20,7 @@ spec:
         app: openclaw
       annotations:
         ai.bstein.dev/model: qwen2.5:7b-instruct-q4_0
+        ai.bstein.dev/instructions: kubectl-field-selectors
         ai.bstein.dev/role: testing-triage
         ai.bstein.dev/placement: gateway lane (titan-20)
     spec: