kubectl -n your-namespace create sa my-sa
kubectl create clusterrole deployments-watcher --verb=list,watch --resource=deployments.apps
kubectl create clusterrolebinding deployments-watcher-clusterrole-binding --clusterrole=deployments-watcher --serviceaccount=your-namespace:my-sa
官网参考链接:
https://argoproj.github.io/argo-events/service-accounts/
https://argoproj.github.io/argo-workflows/service-accounts/