From eb3e0ac436e6982fcc35b701018ab1783af2e19e Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Thu, 13 Aug 2026 20:14:22 -0300
Subject: [PATCH] gitea: preserve SSH key permissions

---
 services/gitea/atlas-identity-bootstrap-job.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/gitea/atlas-identity-bootstrap-job.yaml b/services/gitea/atlas-identity-bootstrap-job.yaml
index d452bc883..3402ba038 100644
--- a/services/gitea/atlas-identity-bootstrap-job.yaml
+++ b/services/gitea/atlas-identity-bootstrap-job.yaml
@@ -17,11 +17,11 @@ spec:
     spec:
       restartPolicy: Never
       serviceAccountName: gitea-vault
+      # fsGroup would recursively loosen Gitea's OpenSSH key permissions on this shared PVC.
       securityContext:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 1000
-        fsGroup: 1000
         seccompProfile:
           type: RuntimeDefault
       affinity: