$ kubectl -n default create sa provisioner
serviceaccount/provisioner created
$ kubectl create clusterrole tenant-provisioner --verb=create,get --resource=namespaces,resourcequotas
clusterrole.rbac.authorization.k8s.io/tenant-provisioner created
$ kubectl create clusterrolebinding tenant-provisioner --clusterrole=tenant-provisioner --serviceaccount=default:provisioner
clusterrolebinding.rbac.authorization.k8s.io/tenant-provisioner created
# Argo's executor reports each step's outcome through its own CRD, so every
# workflow SA needs this too; forget it and even a correct workflow fails:
$ kubectl -n default create role wf-taskresults --verb=create,patch --resource=workflowtaskresults.argoproj.io
role.rbac.authorization.k8s.io/wf-taskresults created
$ kubectl -n default create rolebinding wf-taskresults --role=wf-taskresults --serviceaccount=default:provisioner
rolebinding.rbac.authorization.k8s.io/wf-taskresults created

$ kubectl delete ns team-g --ignore-not-found
namespace "team-g" deleted
$ kubectl create role wf-executor --verb=create,patch --resource=workflowtaskresults.argoproj.io --dry-run=client -o yaml | kubectl apply -f -
role.rbac.authorization.k8s.io/wf-executor unchanged
$ kubectl create rolebinding default-wf-executor --role=wf-executor --serviceaccount=default:default --dry-run=client -o yaml | kubectl apply -f -
rolebinding.rbac.authorization.k8s.io/default-wf-executor unchanged
$ kubectl apply -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: WorkflowTemplate
metadata: { name: provision-tenant, namespace: default }
spec:
  entrypoint: provision
  serviceAccountName: provisioner
  arguments: { parameters: [{ name: team, value: team-d }] }
  templates:
    - name: provision
      dag:
        tasks:
          - name: namespace
            template: make-ns
          - name: quota
            template: make-quota
            dependencies: [namespace]
    - name: make-ns
      resource:
        action: create
        manifest: |
          apiVersion: v1
          kind: Namespace
          metadata:
            name: "{{workflow.parameters.team}}"
            labels: { tenant: "{{workflow.parameters.team}}" }
    - name: make-quota
      resource:
        action: create
        manifest: |
          apiVersion: v1
          kind: ResourceQuota
          metadata:
            name: default-quota
            namespace: "{{workflow.parameters.team}}"
          spec:
            hard: { requests.cpu: "1", requests.memory: 2Gi, pods: "10" }
EOF
workflowtemplate.argoproj.io/provision-tenant unchanged
$ argo submit --from workflowtemplate/provision-tenant -p team=team-g --wait
Name:                provision-tenant-524qt
Namespace:           default
ServiceAccount:      unset
Status:              Pending
Created:             Sat Sep 12 23:12:05 -0400 (now)
Progress:            
Parameters:          
  team:              team-g
provision-tenant-524qt Succeeded at 2026-09-12 23:12:25 -0400 EDT
$ argo get @latest
Name:                provision-tenant-524qt
Namespace:           default
ServiceAccount:      provisioner
Status:              Succeeded
Conditions:          
 PodRunning          False
 Completed           True
Created:             Sat Sep 12 23:12:05 -0400 (21 seconds ago)
Started:             Sat Sep 12 23:12:05 -0400 (21 seconds ago)
Finished:            Sat Sep 12 23:12:25 -0400 (1 second ago)
Duration:            20 seconds
Progress:            2/2
ResourcesDuration:   2s*(100Mi memory),0s*(1 cpu)
Parameters:          
  team:              team-g

STEP                       TEMPLATE    PODNAME                                       DURATION  MESSAGE
 ✔ provision-tenant-524qt  provision                                                             
 ├─✔ namespace             make-ns     provision-tenant-524qt-make-ns-3648215291     5s          
 └─✔ quota                 make-quota  provision-tenant-524qt-make-quota-3757520604  5s          
$ kubectl get ns team-g
NAME     STATUS   AGE
team-g   Active   17s
$ kubectl -n team-g get resourcequota default-quota
NAME            REQUEST                                                 LIMIT   AGE
default-quota   pods: 0/10, requests.cpu: 0/1, requests.memory: 0/2Gi           6s
$ kubectl delete ns team-g --ignore-not-found --wait=false
namespace "team-g" deleted
$ kubectl delete workflowtemplate provision-tenant
workflowtemplate.argoproj.io "provision-tenant" deleted from default namespace

$ kubectl create role wf-executor --verb=create,patch --resource=workflowtaskresults.argoproj.io --dry-run=client -o yaml | kubectl apply -f -
role.rbac.authorization.k8s.io/wf-executor unchanged
$ kubectl create rolebinding default-wf-executor --role=wf-executor --serviceaccount=default:default --dry-run=client -o yaml | kubectl apply -f -
rolebinding.rbac.authorization.k8s.io/default-wf-executor unchanged
$ kubectl create -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata: { generateName: retryer-, namespace: default }
spec:
  entrypoint: flaky
  templates:
    - name: flaky
      retryStrategy:
        limit: "2"
        retryPolicy: OnFailure
        backoff: { duration: "5s", factor: "2" }
      container:
        image: busybox:1.36
        command: [sh, -c]
        args: ["exit 1"]
EOF
workflow.argoproj.io/retryer-mhqnn created
$ sleep 90
$ WF=$(kubectl get wf --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1:].metadata.name}')
$ kubectl get wf "$WF" -o jsonpath='{.status.nodes}' | jq '.[] | {displayName, type, phase, message}'
{
  "displayName": "retryer-mhqnn",
  "type": "Retry",
  "phase": "Failed",
  "message": "No more retries left"
}
{
  "displayName": "retryer-mhqnn(1)",
  "type": "Pod",
  "phase": "Failed",
  "message": "main: Error (exit code 1)"
}
{
  "displayName": "retryer-mhqnn(0)",
  "type": "Pod",
  "phase": "Failed",
  "message": "main: Error (exit code 1)"
}
{
  "displayName": "retryer-mhqnn(2)",
  "type": "Pod",
  "phase": "Failed",
  "message": "main: Error (exit code 1)"
}
$ kubectl get wf "$WF" -o jsonpath='{.status.phase} {.status.message}{"\n"}'
Failed No more retries left

$ kubectl create role wf-executor --verb=create,patch --resource=workflowtaskresults.argoproj.io --dry-run=client -o yaml | kubectl apply -f -
role.rbac.authorization.k8s.io/wf-executor unchanged
$ kubectl create rolebinding default-wf-executor --role=wf-executor --serviceaccount=default:default --dry-run=client -o yaml | kubectl apply -f -
rolebinding.rbac.authorization.k8s.io/default-wf-executor unchanged
$ kubectl create -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata: { generateName: deadline-, namespace: default }
spec:
  entrypoint: slow
  templates:
    - name: slow
      activeDeadlineSeconds: 10
      container:
        image: busybox:1.36
        command: [sh, -c]
        args: ["sleep 60"]
EOF
workflow.argoproj.io/deadline-pwgzt created
$ sleep 60
$ WF=$(kubectl get wf --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1:].metadata.name}')
$ kubectl get wf "$WF" -o jsonpath='{.status.nodes}' | jq '.[] | {displayName, phase, message}'
{
  "displayName": "deadline-pwgzt",
  "phase": "Failed",
  "message": "Pod was active on the node longer than the specified deadline"
}
$ kubectl get wf -o name | grep 'deadline-' | xargs -r kubectl delete
workflow.argoproj.io "deadline-pwgzt" deleted from default namespace

$ kubectl create role wf-executor --verb=create,patch --resource=workflowtaskresults.argoproj.io --dry-run=client -o yaml | kubectl apply -f -
role.rbac.authorization.k8s.io/wf-executor unchanged
$ kubectl create rolebinding default-wf-executor --role=wf-executor --serviceaccount=default:default --dry-run=client -o yaml | kubectl apply -f -
rolebinding.rbac.authorization.k8s.io/default-wf-executor unchanged
$ cat > /tmp/locked.yaml <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata: { generateName: locked-, namespace: default }
spec:
  entrypoint: work
  synchronization:
    mutexes: [{ name: lab-lock }]
  templates:
    - name: work
      container:
        image: busybox:1.36
        command: [sh, -c]
        args: ["sleep 60"]
EOF
$ kubectl create -f /tmp/locked.yaml
workflow.argoproj.io/locked-ccpvq created
$ kubectl create -f /tmp/locked.yaml
workflow.argoproj.io/locked-2nmfw created
$ sleep 15
$ kubectl get wf -l workflows.argoproj.io/phase --sort-by=.metadata.creationTimestamp | tail -3
rightscope-ccj6r         Succeeded   5m2s    
locked-ccpvq             Running     16s     
locked-2nmfw             Pending             Waiting for default/Mutex/lab-lock lock. Lock status: 0/1
$ kubectl get wf --sort-by=.metadata.creationTimestamp -o jsonpath='{range .items[-2:]}{.metadata.name} {.status.phase}{"\n"}{end}'
locked-ccpvq Running
locked-2nmfw Pending
$ kubectl get wf --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1:].status.message}{"\n"}'
Waiting for default/Mutex/lab-lock lock. Lock status: 0/1
$ kubectl -n argo get cm argo-workflows-workflow-controller-configmap -o jsonpath='{.data}' | jq
{
  "config": "nodeEvents:\n  enabled: true\nworkflowEvents:\n  enabled: true\nfailedPodRestart:\n  enabled: false\n  maxRestarts: 3\n"
}
$ kubectl delete wf -l workflows.argoproj.io/workflow --ignore-not-found 2>/dev/null; kubectl get wf -o name | grep locked- | xargs -r kubectl delete
No resources found
workflow.argoproj.io "locked-2nmfw" deleted from default namespace
workflow.argoproj.io "locked-ccpvq" deleted from default namespace

$ kubectl create role wf-executor --verb=create,patch --resource=workflowtaskresults.argoproj.io --dry-run=client -o yaml | kubectl apply -f -
role.rbac.authorization.k8s.io/wf-executor unchanged
$ kubectl create rolebinding default-wf-executor --role=wf-executor --serviceaccount=default:default --dry-run=client -o yaml | kubectl apply -f -
rolebinding.rbac.authorization.k8s.io/default-wf-executor unchanged
$ kubectl create -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata: { generateName: exiter-, namespace: default }
spec:
  entrypoint: work
  onExit: report
  templates:
    - name: work
      container:
        image: busybox:1.36
        command: [sh, -c]
        args: ["exit 1"]
    - name: report
      container:
        image: busybox:1.36
        command: [sh, -c]
        args: ["echo workflow finished as {{workflow.status}}"]
EOF
workflow.argoproj.io/exiter-dl5qg created
$ sleep 75
$ WF=$(kubectl get wf --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1:].metadata.name}')
$ argo logs "$WF" | tail -5
exiter-dl5qg: Error: exit status 1
exiter-dl5qg-report-4006390619: time=2026-09-13T12:59:01.702Z level=INFO msg="waiting for signals" argo=true signalPath=/var/run/argo/ctr/main/signal
exiter-dl5qg-report-4006390619: workflow finished as Failed
exiter-dl5qg-report-4006390619: time=2026-09-13T12:59:02.702Z level=INFO msg="sub-process exited" error=<nil> argo=true
exiter-dl5qg-report-4006390619: time=2026-09-13T12:59:02.703Z level=INFO msg="file signal handler exiting due to context cancellation" argo=true
$ kubectl create -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata: { name: stoppable, namespace: default }
spec:
  entrypoint: work
  onExit: report
  templates:
    - name: work
      container:
        image: busybox:1.36
        command: [sh, -c]
        args: ["sleep 600"]
    - name: report
      container:
        image: busybox:1.36
        command: [sh, -c]
        args: ["echo exit handler ran after {{workflow.status}}"]
EOF
workflow.argoproj.io/stoppable created
$ sleep 20
$ argo stop stoppable
workflow stoppable stopped
$ sleep 45
$ kubectl get wf stoppable -o jsonpath='{.status.nodes}' | jq '.[] | {displayName, phase}'
{
  "displayName": "stoppable",
  "phase": "Failed"
}
{
  "displayName": "stoppable.onExit",
  "phase": "Succeeded"
}
$ kubectl delete wf stoppable
workflow.argoproj.io "stoppable" deleted from default namespace
$ kubectl get wf -o name | grep 'exiter-' | xargs -r kubectl delete
workflow.argoproj.io "exiter-dl5qg" deleted from default namespace

$ kubectl create role wf-executor --verb=create,patch --resource=workflowtaskresults.argoproj.io --dry-run=client -o yaml | kubectl apply -f -
role.rbac.authorization.k8s.io/wf-executor unchanged
$ kubectl create rolebinding default-wf-executor --role=wf-executor --serviceaccount=default:default --dry-run=client -o yaml | kubectl apply -f -
rolebinding.rbac.authorization.k8s.io/default-wf-executor unchanged
$ kubectl create -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: CronWorkflow
metadata: { name: every-minute, namespace: default }
spec:
  schedules: ["* * * * *"]
  concurrencyPolicy: Forbid
  workflowSpec:
    entrypoint: work
    templates:
      - name: work
        container:
          image: busybox:1.36
          command: [sh, -c]
          args: ["sleep 90"]
EOF
cronworkflow.argoproj.io/every-minute created
$ sleep 210
$ argo cron get every-minute
Name:                          every-minute
Namespace:                     default
Created:                       Sat Sep 12 23:16:10 -0400 (3 minutes ago)
Schedules:                     * * * * *
Suspended:                     false
ConcurrencyPolicy:             Forbid
LastScheduledTime:             Sat Sep 12 23:19:00 -0400 (40 seconds ago)
NextScheduledTime:             Sat Sep 12 23:20:00 -0400 (19 seconds from now) (assumes workflow-controller is in UTC)
Active Workflows:              every-minute-1789269540
$ kubectl get wf -l workflows.argoproj.io/cron-workflow=every-minute
NAME                      STATUS      AGE     MESSAGE
every-minute-1789269420   Succeeded   2m41s   
every-minute-1789269540   Running     41s     
$ kubectl get cronwf every-minute -o jsonpath='{.status}' | jq
{
  "active": [
    {
      "apiVersion": "argoproj.io/v1alpha1",
      "kind": "Workflow",
      "name": "every-minute-1789269540",
      "namespace": "default",
      "resourceVersion": "338837",
      "uid": "d13a072b-faf2-4516-ae37-69b988fb3d1b"
    }
  ],
  "failed": 0,
  "lastScheduledTime": "2026-09-13T03:19:00Z",
  "phase": "Active",
  "succeeded": 1
}
$ kubectl delete cronwf every-minute
cronworkflow.argoproj.io "every-minute" deleted from default namespace
$ kubectl delete wf -l workflows.argoproj.io/cron-workflow=every-minute
No resources found

$ kubectl create role wf-executor --verb=create,patch --resource=workflowtaskresults.argoproj.io --dry-run=client -o yaml | kubectl apply -f -
role.rbac.authorization.k8s.io/wf-executor unchanged
$ kubectl create rolebinding default-wf-executor --role=wf-executor --serviceaccount=default:default --dry-run=client -o yaml | kubectl apply -f -
rolebinding.rbac.authorization.k8s.io/default-wf-executor unchanged
$ kubectl apply -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: ClusterWorkflowTemplate
metadata: { name: shared-say }
spec:
  templates:
    - name: say
      container:
        image: busybox:1.36
        command: [sh, -c]
        args: ["echo from the cluster-scoped template"]
EOF
clusterworkflowtemplate.argoproj.io/shared-say created
$ kubectl create -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata: { generateName: wrongscope-, namespace: default }
spec:
  entrypoint: main
  templates:
    - name: main
      steps:
        - - name: call
            templateRef: { name: shared-say, template: say }
EOF
workflow.argoproj.io/wrongscope-pzf62 created
$ sleep 30
$ kubectl get wf --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1:].status.message}{"\n"}'
invalid spec: templates.main.steps[0].call template reference shared-say.say not found
$ kubectl create -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata: { generateName: rightscope-, namespace: default }
spec:
  entrypoint: main
  templates:
    - name: main
      steps:
        - - name: call
            templateRef: { name: shared-say, template: say, clusterScope: true }
EOF
workflow.argoproj.io/rightscope-ccj6r created
$ sleep 45
$ argo logs @latest | tail -3
rightscope-ccj6r-say-4102760526: from the cluster-scoped template
rightscope-ccj6r-say-4102760526: time=2026-09-13T03:20:45.688Z level=INFO msg="sub-process exited" argo=true error=<nil>
rightscope-ccj6r-say-4102760526: time=2026-09-13T03:20:45.688Z level=INFO msg="file signal handler exiting due to context cancellation" argo=true
$ kubectl delete clusterworkflowtemplate shared-say
clusterworkflowtemplate.argoproj.io "shared-say" deleted

$ kubectl create role wf-executor --verb=create,patch --resource=workflowtaskresults.argoproj.io --dry-run=client -o yaml | kubectl apply -f -
role.rbac.authorization.k8s.io/wf-executor unchanged
$ kubectl create rolebinding default-wf-executor --role=wf-executor --serviceaccount=default:default --dry-run=client -o yaml | kubectl apply -f -
rolebinding.rbac.authorization.k8s.io/default-wf-executor unchanged
$ kubectl apply -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: WorkflowTemplate
metadata: { name: sanctioned, namespace: default }
spec:
  entrypoint: work
  serviceAccountName: default
  templates:
    - name: work
      container: { image: busybox:1.36, command: [sh, -c], args: ["echo sanctioned"] }
EOF
workflowtemplate.argoproj.io/sanctioned unchanged
$ # every controller setting lives in the single config key, so append to it rather than adding a sibling
$ kubectl -n argo get cm argo-workflows-workflow-controller-configmap -o jsonpath='{.data.config}' > /tmp/argocfg.yaml
$ cp /tmp/argocfg.yaml /tmp/argocfg.orig
$ printf 'workflowRestrictions:\n  templateReferencing: Strict\n' >> /tmp/argocfg.yaml
$ kubectl -n argo create cm argo-workflows-workflow-controller-configmap --from-file=config=/tmp/argocfg.yaml --dry-run=client -o yaml | kubectl -n argo apply -f -
configmap/argo-workflows-workflow-controller-configmap configured
$ kubectl -n argo rollout restart deploy argo-workflows-workflow-controller
deployment.apps/argo-workflows-workflow-controller restarted
$ kubectl -n argo rollout status deploy argo-workflows-workflow-controller --timeout=180s
Waiting for deployment "argo-workflows-workflow-controller" rollout to finish: 0 out of 1 new replicas have been updated...
Waiting for deployment "argo-workflows-workflow-controller" rollout to finish: 0 out of 1 new replicas have been updated...
Waiting for deployment "argo-workflows-workflow-controller" rollout to finish: 0 out of 1 new replicas have been updated...
Waiting for deployment "argo-workflows-workflow-controller" rollout to finish: 0 out of 1 new replicas have been updated...
Waiting for deployment "argo-workflows-workflow-controller" rollout to finish: 0 of 1 updated replicas are available...
deployment "argo-workflows-workflow-controller" successfully rolled out
$ kubectl create -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata: { generateName: bare-, namespace: default }
spec:
  entrypoint: work
  templates:
    - name: work
      container: { image: busybox:1.36, command: [sh, -c], args: ["echo hi"] }
EOF
workflow.argoproj.io/bare-nt5d8 created
$ kubectl create -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata: { generateName: override-, namespace: default }
spec:
  serviceAccountName: default
  workflowTemplateRef: { name: sanctioned }
EOF
workflow.argoproj.io/override-j74f6 created
$ kubectl create -f - <<'EOF'
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata: { generateName: fromtmpl-, namespace: default }
spec:
  workflowTemplateRef: { name: sanctioned }
EOF
workflow.argoproj.io/fromtmpl-tz52d created
$ sleep 40
$ kubectl get wf --sort-by=.metadata.creationTimestamp -o jsonpath='{range .items[-3:]}{.metadata.name} {.status.phase} {.status.message}{"\n"}{end}'
bare-nt5d8 Error workflows must use workflowTemplateRef to be executed when the controller is in reference mode
fromtmpl-tz52d Succeeded 
override-j74f6 Error fields [ServiceAccountName] are not permitted when using workflowTemplateRef with templateReferencing restriction
$ kubectl -n argo create cm argo-workflows-workflow-controller-configmap --from-file=config=/tmp/argocfg.orig --dry-run=client -o yaml | kubectl -n argo apply -f -
configmap/argo-workflows-workflow-controller-configmap configured
$ kubectl -n argo rollout restart deploy argo-workflows-workflow-controller
deployment.apps/argo-workflows-workflow-controller restarted
$ kubectl -n argo rollout status deploy argo-workflows-workflow-controller --timeout=180s
Waiting for deployment "argo-workflows-workflow-controller" rollout to finish: 0 out of 1 new replicas have been updated...
Waiting for deployment "argo-workflows-workflow-controller" rollout to finish: 0 out of 1 new replicas have been updated...
Waiting for deployment "argo-workflows-workflow-controller" rollout to finish: 0 out of 1 new replicas have been updated...
Waiting for deployment "argo-workflows-workflow-controller" rollout to finish: 0 out of 1 new replicas have been updated...
Waiting for deployment "argo-workflows-workflow-controller" rollout to finish: 0 of 1 updated replicas are available...
deployment "argo-workflows-workflow-controller" successfully rolled out
$ kubectl delete workflowtemplate sanctioned
workflowtemplate.argoproj.io "sanctioned" deleted from default namespace
$ kubectl get wf -o name | grep -E 'bare-|override-|fromtmpl-' | xargs -r kubectl delete
workflow.argoproj.io "bare-nt5d8" deleted from default namespace
workflow.argoproj.io "fromtmpl-tz52d" deleted from default namespace
workflow.argoproj.io "override-j74f6" deleted from default namespace

$ kubectl create role wf-executor --verb=create,patch --resource=workflowtaskresults.argoproj.io --dry-run=client -o yaml | kubectl apply -f -
role.rbac.authorization.k8s.io/wf-executor unchanged
$ kubectl create rolebinding default-wf-executor --role=wf-executor --serviceaccount=default:default --dry-run=client -o yaml | kubectl apply -f -
rolebinding.rbac.authorization.k8s.io/default-wf-executor unchanged
$ kubectl -n argo port-forward svc/argo-workflows-server 2746:2746 & PF1=$!
$ sleep 5
Forwarding from 127.0.0.1:2746 -> 2746
Forwarding from [::1]:2746 -> 2746
$ kubectl -n argo create sa submitter --dry-run=client -o yaml | kubectl apply -f -
serviceaccount/submitter created
$ kubectl create clusterrolebinding submitter --clusterrole=admin --serviceaccount=argo:submitter --dry-run=client -o yaml | kubectl apply -f -
clusterrolebinding.rbac.authorization.k8s.io/submitter created
$ TOKEN=$(kubectl -n argo create token submitter --duration=10m)
$ cat > /tmp/submit.json <<'EOF'
{"namespace":"default","serverDryRun":false,"workflow":{"metadata":{"generateName":"via-api-","namespace":"default"},"spec":{"entrypoint":"work","templates":[{"name":"work","container":{"image":"busybox:1.36","command":["sh","-c"],"args":["echo submitted over http"]}}]}}}
EOF
$ curl -s -o /tmp/submit-response.json -w '%{http_code}\n' -H "Authorization: Bearer $TOKEN" -H 'Content-Type: application/json' -d @/tmp/submit.json http://localhost:2746/api/v1/workflows/default
Handling connection for 2746
200
$ jq '{name: .metadata.name, phase: .status.phase}' /tmp/submit-response.json
{
  "name": "via-api-8tft9",
  "phase": null
}
$ kubectl get wf | grep via-api
via-api-8tft9                                
$ kill $PF1
$ kubectl delete clusterrolebinding submitter
clusterrolebinding.rbac.authorization.k8s.io "submitter" deleted
$ kubectl -n argo delete sa submitter
serviceaccount "submitter" deleted from argo namespace
$ kubectl get wf -o name | grep via-api- | xargs -r kubectl delete
workflow.argoproj.io "via-api-8tft9" deleted from default namespace