Failed to establish pod watch in Argo

After creating a brand new Kubernetes cluster in GKE, I launched an Argo workflow but saw these errors:

Argo will create two containers for a step: ‘main’ container and ‘wait’ container. But why the creation of ‘wait’ failed? The reason is the default service account for Argo haven’t permission for get pod, as this comment said.
So I just run

kubectl create rolebinding default-admin --clusterrole=admin --serviceaccount=default:default

to give default service account ‘admin’ privilege. And everything goes successfully now.