diff --git a/values/ingest/manifests/deployment.yaml b/values/ingest/manifests/deployment.yaml
index f06cd0c7..b318f85d 100644
--- a/values/ingest/manifests/deployment.yaml
+++ b/values/ingest/manifests/deployment.yaml
@@ -15,11 +15,11 @@ spec:
       labels:
         app.kubernetes.io/name: ingest
     spec:
-      # NOTE: Run as the data uid so downloaded files are owned correctly
+      # Run as the data uid/gid so files are owned correctly. No fsGroup: it would
+      # recursively chown the whole shared CephFS volume on every mount.
       securityContext:
         runAsUser: 5000
         runAsGroup: 5000
-        fsGroup: 5000
       containers:
         - name: ingest
           image: git.oceanbox.io/oceanbox/churn/ingest:d77ad04a-debug