kubectl -n your-namespace create sa my-sa

kubectl create clusterrole deployments-watcher --verb=list,watch --resource=deployments.apps

kubectl create clusterrolebinding deployments-watcher-clusterrole-binding --clusterrole=deployments-watcher --serviceaccount=your-namespace:my-sa

官网参考链接:
​​​ https://argoproj.github.io/argo-events/service-accounts/​​ https://argoproj.github.io/argo-workflows/service-accounts/