How gitlab access /etc/ssh/ssh_host_ecdsa_key.pub

How to Use GitLab Self-managed
1

Problem to solve

when access https://INSTANCE/help/instance_configuration, shows 500 error

from log there are some error about permission of /etc/ssh/ssh_host_ecdsa_key.pub

ActionView::Template::Error (Permission denied @ rb_sysopen - /etc/ssh/ssh_host_ecdsa_key.pub):
    1: - ssh_info = @instance_configuration.settings[:ssh_algorithms_hashes]
    2: - content_for :table_content do
    3:   %li
    4:     = link_to _('SSH host key fingerprints'), '#ssh-host-keys-fingerprints'

app/models/instance_configuration.rb:168:in `read'
app/models/instance_configuration.rb:168:in `ssh_algorithm_file_content'
app/models/instance_configuration.rb:156:in `ssh_algorithm_hashes'
app/models/instance_configuration.rb:26:in `block in ssh_algorithms_hashes'
app/models/instance_configuration.rb:26:in `map'
app/models/instance_configuration.rb:26:in `ssh_algorithms_hashes'
app/models/instance_configuration.rb:13:in `block in settings'
activesupport (7.0.8.1) lib/active_support/cache.rb:809:in `block in save_block_result_to_cache'
activesupport (7.0.8.1) lib/active_support/cache.rb:783:in `block in instrument'
activesupport (7.0.8.1) lib/active_support/notifications.rb:206:in `block in instrument'
activesupport (7.0.8.1) lib/active_support/notifications/instrumenter.rb:24:in `instrument'
activesupport (7.0.8.1) lib/active_support/notifications.rb:206:in `instrument'
activesupport (7.0.8.1) lib/active_support/cache.rb:783:in `instrument'
activesupport (7.0.8.1) lib/active_support/cache.rb:808:in `save_block_result_to_cache'
activesupport (7.0.8.1) lib/active_support/cache.rb:338:in `fetch'
app/models/instance_configuration.rb:12:in `settings'
app/views/help/instance_configuration/_ssh_info.html.haml:1
actionview (7.0.8.1) lib/action_view/base.rb:244:in `public_send'
actionview (7.0.8.1) lib/action_view/base.rb:244:in `_run'
actionview (7.0.8.1) lib/action_view/template.rb:157:in `block in render'
activesupport (7.0.8.1) lib/active_support/notifications.rb:208:in `instrument'
actionview (7.0.8.1) lib/action_view/template.rb:361:in `instrument_render_template'
actionview (7.0.8.1) lib/action_view/template.rb:155:in `render'
actionview (7.0.8.1) lib/action_view/renderer/partial_renderer.rb:251:in `block in render_partial_template'
activesupport (7.0.8.1) lib/active_support/notifications.rb:208:in `instrument'
actionview (7.0.8.1) lib/action_view/renderer/partial_renderer.rb:246:in `render_partial_template'
actionview (7.0.8.1) lib/action_view/renderer/partial_renderer.rb:237:in `render'
actionview (7.0.8.1) lib/action_view/renderer/renderer.rb:81:in `render_partial_to_object'
actionview (7.0.8.1) lib/action_view/renderer/renderer.rb:53:in `render_partial'
actionview (7.0.8.1) lib/action_view/helpers/rendering_helper.rb:44:in `render'
app/views/help/instance_configuration.html.haml:8
actionview (7.0.8.1) lib/action_view/base.rb:244:in `public_send'
actionview (7.0.8.1) lib/action_view/base.rb:244:in `_run'
actionview (7.0.8.1) lib/action_view/template.rb:157:in `block in render'
activesupport (7.0.8.1) lib/active_support/notifications.rb:208:in `instrument'
actionview (7.0.8.1) lib/action_view/template.rb:361:in `instrument_render_template'
actionview (7.0.8.1) lib/action_view/template.rb:155:in `render'
actionview (7.0.8.1) lib/action_view/renderer/template_renderer.rb:65:in `block (2 levels) in render_template'
activesupport (7.0.8.1) lib/active_support/notifications.rb:206:in `block in instrument'
activesupport (7.0.8.1) lib/active_support/notifications/instrumenter.rb:24:in `instrument'

from my understand, /etc/ssh/ssh_host_ecdsa_key.pub is only readable to root user, so how gitlab user can read this file?

Thanks for taking the time to be thorough in your request, it really helps! :blush: