Add email scope to GCP provided credential refresh

2018-12-12 12:47:12 +01:00 · 2018-12-12 12:47:12 +01:00 · 1637d56364
commit 1637d56364
parent 5c242ead60
1 changed files with 4 additions and 3 deletions
--- a/config/kube_config.py
+++ b/config/kube_config.py
@ -141,9 +141,10 @@ class KubeConfigLoader(object):
        self._config_persister = config_persister

        def _refresh_credentials():
-            credentials, project_id = google.auth.default(
-                scopes=['https://www.googleapis.com/auth/cloud-platform']
-            )
+            credentials, project_id = google.auth.default(scopes=[
+                'https://www.googleapis.com/auth/cloud-platform',
+                'https://www.googleapis.com/auth/userinfo.email'
+            ])
            request = google.auth.transport.requests.Request()
            credentials.refresh(request)
            return credentials