diff --git a/test/e2e/manifests/mixins/get-cm-rbac.yaml b/test/e2e/manifests/mixins/get-cm-rbac.yaml
index efd7a5108ba09..f22befaa898c5 100644
--- a/test/e2e/manifests/mixins/get-cm-rbac.yaml
+++ b/test/e2e/manifests/mixins/get-cm-rbac.yaml
@@ -22,6 +22,7 @@ rules:
   - configmaps
   verbs:
   - get
+  - list
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
diff --git a/workflow/controller/workflowpod.go b/workflow/controller/workflowpod.go
index 46ef68f6fdc38..a45e38c10101b 100644
--- a/workflow/controller/workflowpod.go
+++ b/workflow/controller/workflowpod.go
@@ -240,7 +240,7 @@ func (woc *wfOperationCtx) createWorkflowPod(ctx context.Context, nodeName strin
 	}
 
 	// Configuring default container to be used with commands like "kubectl exec/logs".
-	// Select "main" container if it's available. In other case use the last container (can happent when pod created from ContainerSet).
+	// Select "main" container if it's available. In other case use the last container (can happen when pod created from ContainerSet).
 	defaultContainer := pod.Spec.Containers[len(pod.Spec.Containers)-1].Name
 	for _, c := range pod.Spec.Containers {
 		if c.Name == common.MainContainerName {