# What permissions does the deploy key created by 'flux bootstrap github' have by default?

Flux CD, Hard (Expert), Security. https://k8wiz.com/uquiz/what-permissions-does-the-deploy-key-created-by-flux-bootstrap-github-have-by-default

- A. Read-only, unless you pass --read-write-key
- B. Read and write, so image automation can push
- C. Admin, so Flux can manage the repository's webhooks
- D. None, because bootstrap always uses your token

**Answer:** Read-only, unless you pass --read-write-key

**Explanation:** Bootstrap creates an SSH deploy key with read-only access, which is all syncing needs. Image update automation has to push commits, so it needs --read-write-key or separate credentials. With --token-auth, Flux uses the token over HTTPS instead of a deploy key.