From c25df9526b2163a9cd38a220eda79d1b5995b236 Mon Sep 17 00:00:00 2001
From: Mert Acar <25368652+M4C4R@users.noreply.github.com>
Date: Fri, 25 Jul 2025 11:15:41 +0100
Subject: [PATCH] fix creds scope for SAs during refresh

---
 server.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.go b/server.go
index dabfb73..db6364e 100644
--- a/server.go
+++ b/server.go
@@ -170,7 +170,7 @@ func deletePullSecret(clientset *kubernetes.Clientset, ns corev1.Namespace) erro
 
 // refreshAllPullSecrets deletes and recreates image registry pull secrets for all namespaces
 func refreshAllPullSecrets() error {
-	creds, err := google.FindDefaultCredentials(context.Background())
+	creds, err := google.FindDefaultCredentials(context.Background(), "https://www.googleapis.com/auth/cloud-platform")
 	if err != nil {
 		return fmt.Errorf("finding default credentials: %v", err)
 	}