gitea: preserve SSH key permissions

2026-08-13 20:14:22 -03:00 · 2026-08-13 20:14:22 -03:00 · eb3e0ac436
commit eb3e0ac436
parent da5b10adba
1 changed files with 1 additions and 1 deletions
--- a/services/gitea/atlas-identity-bootstrap-job.yaml
+++ b/services/gitea/atlas-identity-bootstrap-job.yaml
@ -17,11 +17,11 @@ spec:
    spec:
      restartPolicy: Never
      serviceAccountName: gitea-vault
+      # fsGroup would recursively loosen Gitea's OpenSSH key permissions on this shared PVC.
      securityContext:
        runAsNonRoot: true
        runAsUser: 1000
        runAsGroup: 1000
-        fsGroup: 1000
        seccompProfile:
          type: RuntimeDefault
      affinity: