From 02045fa299bd06b3d2774132c642860a7b0265a0 Mon Sep 17 00:00:00 2001
From: Raghunandan Balachandran <raghunandan@spotify.com>
Date: Tue, 12 Aug 2025 09:54:46 +0200
Subject: [PATCH] remove explicit scopes

Signed-off-by: Raghunandan Balachandran <raghunandan@spotify.com>
---
 .../src/auth/GoogleServiceAccountStrategy.test.ts                | 1 -
 .../kubernetes-backend/src/auth/GoogleServiceAccountStrategy.ts  | 1 -
 2 files changed, 2 deletions(-)

diff --git a/plugins/kubernetes-backend/src/auth/GoogleServiceAccountStrategy.test.ts b/plugins/kubernetes-backend/src/auth/GoogleServiceAccountStrategy.test.ts
index 57181f61c6..d70cba784d 100644
--- a/plugins/kubernetes-backend/src/auth/GoogleServiceAccountStrategy.test.ts
+++ b/plugins/kubernetes-backend/src/auth/GoogleServiceAccountStrategy.test.ts
@@ -100,7 +100,6 @@ describe('GoogleServiceAccountStrategy', () => {
 
       expect(MockedClusterManagerClient).toHaveBeenCalledWith({
         credentials: serviceAccountKey,
-        scopes: ['https://www.googleapis.com/auth/container.readonly'],
       });
       expect(mockGetAccessToken).toHaveBeenCalled();
       expect(credential).toEqual({
diff --git a/plugins/kubernetes-backend/src/auth/GoogleServiceAccountStrategy.ts b/plugins/kubernetes-backend/src/auth/GoogleServiceAccountStrategy.ts
index a6ffdc00e8..2e2af018bc 100644
--- a/plugins/kubernetes-backend/src/auth/GoogleServiceAccountStrategy.ts
+++ b/plugins/kubernetes-backend/src/auth/GoogleServiceAccountStrategy.ts
@@ -65,7 +65,6 @@ export class GoogleServiceAccountStrategy implements AuthenticationStrategy {
 
         client = new container.v1.ClusterManagerClient({
           credentials: credentialsObject,
-          scopes: ['https://www.googleapis.com/auth/container.readonly'],
         });
       } catch (error) {
         throw new Error(