diff --git a/config/kube_config.py b/config/kube_config.py
index 9a99ecf78..4e09d6a95 100644
--- a/config/kube_config.py
+++ b/config/kube_config.py
@@ -129,7 +129,9 @@ class KubeConfigLoader(object):
         self._config_persister = config_persister
 
         def _refresh_credentials():
-            credentials, project_id = google.auth.default()
+            credentials, project_id = google.auth.default(
+                scopes=['https://www.googleapis.com/auth/cloud-platform']
+            )
             request = google.auth.transport.requests.Request()
             credentials.refresh(request)
             return credentials