After creating a brand new Kubernetes cluster in GKE, I launched an Argo workflow but saw these errors:

Argo will create two containers for a step: ‘main’ container and ‘wait’ container. But why the creation of ‘wait’ failed? The reason is the default service account for Argo haven’t permission for `get pod`, as this comment said.
So I just run

kubectl create rolebinding default-admin --clusterrole=admin --serviceaccount=default:default

to give default service account ‘admin’ privilege. And everything goes successfully now.