From 2f93cbed07d92410a567d6f97970a55b42d7b988 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20J=C3=B6rg?= <moritz.jorg@oceanbox.io>
Date: Thu, 18 Jun 2026 18:06:58 +0200
Subject: [PATCH] fix(ingest): Correct group in pod for running norshelf

---
 values/ingest/manifests/deployment.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/values/ingest/manifests/deployment.yaml b/values/ingest/manifests/deployment.yaml
index f06cd0c7..b318f85d 100644
--- a/values/ingest/manifests/deployment.yaml
+++ b/values/ingest/manifests/deployment.yaml
@@ -15,11 +15,11 @@ spec:
       labels:
         app.kubernetes.io/name: ingest
     spec:
-      # NOTE: Run as the data uid so downloaded files are owned correctly
+      # Run as the data uid/gid so files are owned correctly. No fsGroup: it would
+      # recursively chown the whole shared CephFS volume on every mount.
       securityContext:
         runAsUser: 5000
         runAsGroup: 5000
-        fsGroup: 5000
       containers:
         - name: ingest
           image: git.oceanbox.io/oceanbox/churn/ingest:d77ad04a-debug