reduce scopes to gke container api

Signed-off-by: Raghunandan Balachandran <raghunandan@spotify.com>

plugins/kubernetes-backend/src/auth/GoogleServiceAccountStrategy.test.ts

@@ -100,7 +100,7 @@ describe('GoogleServiceAccountStrategy', () => {
 
       expect(MockedClusterManagerClient).toHaveBeenCalledWith({
         credentials: serviceAccountKey,
-        scopes: ['https://www.googleapis.com/auth/cloud-platform'],
+        scopes: ['https://www.googleapis.com/auth/container.readonly'],
       });
       expect(mockGetAccessToken).toHaveBeenCalled();
       expect(credential).toEqual({

plugins/kubernetes-backend/src/auth/GoogleServiceAccountStrategy.ts

@@ -65,7 +65,7 @@ export class GoogleServiceAccountStrategy implements AuthenticationStrategy {
 
         client = new container.v1.ClusterManagerClient({
           credentials: credentialsObject,
-          scopes: ['https://www.googleapis.com/auth/cloud-platform'],
+          scopes: ['https://www.googleapis.com/auth/container.readonly'],
         });
       } catch (error) {
         throw new Error(