Quick Start RBAC error in default namespace

[AliMoeen]

I followed the following steps to install argo workflow on a fresh new k3s instance:

https://argo-workflows.readthedocs.io/en/latest/quick-start/

Any sample new default cron workflow produce the following error:

Error (exit code 1): pods "wonderful-whale-1720293540" is forbidden: User "system:serviceaccount:default:default" cannot patch resource "pods" in API group "" in the namespace "default"

I notice the cron workflow run, but the job fails with above error.

I've installed argo workflow through quick start instruction above so many time and using it to run my cron jobs.

This issue popped with "v3.5.8". Has anything changed?

Update:

FYI, the following fixes the issue, but I never had to do this before. The quick start instruction should be clear or include this commands:

kubectl create role executor \
  --verb=create --verb=patch \
  --resource=workflowtaskresults.argoproj.io


kubectl create rolebinding executor-binding \
  --role=executor \
  --serviceaccount=default:default \
  --namespace=default

[agilgur5]

https://argo-workflows.readthedocs.io/en/release-3.5/faq/#cannot-patch-resource-pods-in-api-group-error

Duplicate of #12783 et al

[agilgur5]

Regarding your update:

FYI, the following fixes the issue, but I never had to do this before. The quick start instruction should be clear or include this commands:

It's part of the quick start manifests, bound to the default SA already.

Per your command, it seems like you were using the default namespace, whereas the Quick Start docs use the argo namespace, so I imagine that was the missing link here.

[AliMoeen]

I know the fix as I mentioned in my post.

The point is that quick start instruction used to work perfectly fine and now people have to find a work around after following the instructions.

Please note that quick start supposed to target people new to argo.

[agilgur5]

I know the fix as I mentioned in my post.

I wrote my comment before you made the update.

Similar timing; you might have missed my comment on your update, you used a different namespace than the quick start (default vs. argo), hence your error.

quick start instruction used to work perfectly fine

The Quick Start's use of Executor RBAC has not changed, per the repo history.

[AliMoeen]

you seem to have been using a different namespace than the quick start (default vs. argo), hence your error.

I just followed the quick start. Someone new to argo has no chance to avoid or survive this:

[AliMoeen]

... and I can assure you, I have followed the very same process so many times, never encountered this.

Something must have changed.