By default, new Google Kubernetes Engine clusters are created with read-only permissions for Storage buckets. 
To set the read-write storage scope when creating a Google Kubernetes Engine cluster, use the --scopesoption. 
For example, the following command creates a cluster with the scopes bigquery,
`storage-rw`, and `compute-ro`:
   gcloud container clusters create example-cluster \
  --scopes=bigquery,storage-rw,compute-ro