Fix DAGs mount path in Kubernetes worker pod when gitSync is enabled …

…(#13826)

* Update pod-template-file.kubernetes-helm-yaml

* Fix ssh-key access issue

This change allows dags.gitSync.containerName to read ssh-key from file system.
Similar to this https://github.com/varunvora/airflow/blob/ce0e6280d2ea39838e9f0617625cd07a757c3461/chart/templates/scheduler/scheduler-deployment.yaml#L92
It solves apache/airflow#13680 issue for private repositories.

Co-authored-by: Denis Krivenko <[email protected]>
GitOrigin-RevId: 5f74219e6d400c4eae9134f6015c72430d6d549f

chart/files/pod-template-file.kubernetes-helm-yaml

@@ -61,13 +61,16 @@ spec:
           name: git-sync-ssh-key
           subPath: ssh
 {{- end }}
-{{- if or .Values.dags.gitSync.enabled .Values.dags.persistence.enabled }}
+{{- if .Values.dags.persistence.enabled }}
         - mountPath: {{ include "airflow_dags_mount_path" . }}
           name: dags
           readOnly: true
+{{- end }}
 {{- if .Values.dags.gitSync.enabled }}
+        - mountPath: {{ include "airflow_dags" . }}
+          name: dags
+          readOnly: true
           subPath: {{.Values.dags.gitSync.dest }}/{{ .Values.dags.gitSync.subPath }}
-{{- end }}
 {{- end }}
   hostNetwork: false
   {{- if or .Values.registry.secretName .Values.registry.connection }}
@@ -77,6 +80,7 @@ spec:
   restartPolicy: Never
   securityContext:
     runAsUser: {{ .Values.uid }}
+    fsGroup: {{ .Values.gid }}
   nodeSelector: {{ toYaml .Values.nodeSelector | nindent 4 }}
   affinity: {{ toYaml .Values.affinity | nindent 4 }}
   tolerations: {{ toYaml .Values.tolerations | nindent 4 }}