fix: use correct OAuth2 scope for impersonation (#241)

GoogleCloudPlatform · Jan 23, 2023 · af91431 · af91431
1 parent e9d46d7
commit af91431
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/internal/proxy/proxy.go b/internal/proxy/proxy.go
@@ -33,7 +33,6 @@ import (
 	"golang.org/x/oauth2"
 	"google.golang.org/api/impersonate"
 	"google.golang.org/api/option"
-	"google.golang.org/api/sqladmin/v1"
 )
 
 // InstanceConnConfig holds the configuration for an individual instance
@@ -206,7 +205,7 @@ func credentialsOpt(c Config, l alloydb.Logger) (alloydbconn.Option, error) {
 			impersonate.CredentialsConfig{
 				TargetPrincipal: target,
 				Delegates:       delegates,
-				Scopes:          []string{sqladmin.SqlserviceAdminScope},
+				Scopes:          []string{"https://www.googleapis.com/auth/cloud-platform"},
 			},
 			iopts...,
 		)