diff --git a/services/gitea/oidc-job.yaml b/services/gitea/oidc-job.yaml
index 32c4949..73aacbb 100644
--- a/services/gitea/oidc-job.yaml
+++ b/services/gitea/oidc-job.yaml
@@ -1,6 +1,15 @@
 # services/gitea/oidc-job.yaml
 apiVersion: batch/v1
 kind: Job
+metadata:
+  name: gitea-oidc-bootstrap
+  namespace: gitea
+spec:
+  # clean and recreate when the manifest changes to avoid immutable pod fields
+  template: {}
+---
+apiVersion: batch/v1
+kind: Job
 metadata:
   name: gitea-oidc-bootstrap
   namespace: gitea