reduce scopes to gke container readonly

Signed-off-by: Raghunandan Balachandran <raghunandan@spotify.com>
This commit is contained in:
Raghunandan Balachandran
2025-08-11 22:07:45 +02:00
parent cb36a867f1
commit 261199e9fc
2 changed files with 2 additions and 2 deletions
@@ -306,7 +306,7 @@ describe('GkeEntityProvider', () => {
expect(MockedClusterManagerClient).toHaveBeenCalledWith({
credentials: mockCredentials,
scopes: ['https://www.googleapis.com/auth/cloud-platform'],
scopes: ['https://www.googleapis.com/auth/container.readonly'],
});
});
@@ -90,7 +90,7 @@ export class GkeEntityProvider implements EntityProvider {
const credentialsObject = JSON.parse(credentials);
clusterManagerClient = new container.v1.ClusterManagerClient({
credentials: credentialsObject,
scopes: ['https://www.googleapis.com/auth/cloud-platform'],
scopes: ['https://www.googleapis.com/auth/container.readonly'],
});
} catch (error) {
throw new Error(