argocd permission error

[ray-abel11]

I was trying to link multiple clusters to my Argocd application set k-8 object, I created a service account in which I used cluster role binding to bind, and I used cluster role cluster-admin. so it should be able to access any resource in my cluster. Still, somehow, when I create an application set object it always have errors like failed to sync cluster https://X.X.X.X: failed to load initial state of resource Secret: secrets is forbidden: User "system:serviceaccount:kube-system:ttl-controller" cannot list resource "secrets" in API group "" at the cluster scope. am new to argocd, i don't know what am doing wrong. any help