diff --git a/infra/gcp/default.tf b/infra/gcp/default.tf
index 3011ec234..2cb57836f 100644
--- a/infra/gcp/default.tf
+++ b/infra/gcp/default.tf
@@ -75,6 +75,7 @@ resource "google_container_node_pool" "primary_nodes" {
       "storage-rw",
       "logging-write",
       "monitoring",
+      "https://www.googleapis.com/auth/source.read_only",
     ]
   }
 }