diff --git a/docs/crd.md b/docs/crd.md
index da185639..eeae3e16 100644
--- a/docs/crd.md
+++ b/docs/crd.md
@@ -570,7 +570,7 @@ Settings to define storage to back the jupyter server.
         <td>false</td>
       </tr><tr>
         <td><b>size</b></td>
-        <td>string</td>
+        <td>int or string</td>
         <td>
           Size of the PVC or sizeLimit of the emptyDir volume which backs the session respectively.<br/>
           <br/>
diff --git a/manifests/crd.yaml b/manifests/crd.yaml
index 280b178e..cf19bcf9 100644
--- a/manifests/crd.yaml
+++ b/manifests/crd.yaml
@@ -266,7 +266,7 @@ spec:
                       description:
                         Size of the PVC or sizeLimit of the emptyDir volume which backs the
                         session respectively.
-                      type: string
+                      x-kubernetes-int-or-string: true
                   type: object
               type: object
             status:
diff --git a/manifests/deployment.yaml b/manifests/deployment.yaml
index 26d94ab8..618d54f2 100644
--- a/manifests/deployment.yaml
+++ b/manifests/deployment.yaml
@@ -33,7 +33,10 @@ spec:
       containers:
         - name: amalthea
           securityContext:
-            {}
+            allowPrivilegeEscalation: false
+            runAsGroup: 1000
+            runAsNonRoot: true
+            runAsUser: 1000
           image: "renku/amalthea:latest"
           imagePullPolicy: IfNotPresent
           livenessProbe:
@@ -73,6 +76,12 @@ spec:
               value: "30"
             - name: CPU_USAGE_MILLICORES_IDLE_THRESHOLD
               value: "500"
+            - name: METRICS_ENABLED
+              value: "false"
+            - name: METRICS_PORT
+              value: "8765"
+            - name: METRICS_EXTRA_LABELS
+              value: "[]"
           volumeMounts:
             - name: config
               mountPath: /app/config