From 1637d56364e62cff2d2d188e8a046f9ba77bb763 Mon Sep 17 00:00:00 2001 From: axelsteingrimsson Date: Wed, 12 Dec 2018 12:47:12 +0100 Subject: [PATCH] Add email scope to GCP provided credential refresh --- config/kube_config.py | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/config/kube_config.py b/config/kube_config.py index 958959e30..b391fb223 100644 --- a/config/kube_config.py +++ b/config/kube_config.py @@ -141,9 +141,10 @@ class KubeConfigLoader(object): self._config_persister = config_persister def _refresh_credentials(): - credentials, project_id = google.auth.default( - scopes=['https://www.googleapis.com/auth/cloud-platform'] - ) + credentials, project_id = google.auth.default(scopes=[ + 'https://www.googleapis.com/auth/cloud-platform', + 'https://www.googleapis.com/auth/userinfo.email' + ]) request = google.auth.transport.requests.Request() credentials.refresh(request) return credentials