GCP service account access issue

Question

I have a json file with service account credentials and used it like below in a cloud-sdk:357.0.0-alpine sidecar container.

gcloud auth activate-service-account --key-file=credentials.json

gsutil ls gs://foo/bar/baz

Since cloud-sdk:alpine container is around 600 MB I decided to use rclone container ~ 50MB and used below command to do ls

rclone config create gcs_remote gcs --gcs-service-account-file credentials.json

rclone ls gcs_remote:foo/bar/baz

But this is failing with error Failed to ls: googleapi: Error 403: [email protected] does not have storage.objects.list access to the Google Cloud Storage bucket., forbidden