See: spring-attic/spring-cloud-gcp#962.
I suspect that the root cause is in the client library.

Note that when the same credentials file is used to publish a message to a topic, an appropriate exception is thrown saying java.io.IOException: Error getting access token for service account and 401 Unauthorized.