From 736ec9a8dc9fb4a1ad28ecf0d436911abbefe18d Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 16 May 2022 16:33:07 +0200
Subject: [PATCH] chore: update rendered manifests and CRD docs (#148)

Co-authored-by: Tasko Olevski <olevski90@gmail.com>
---
 docs/crd.md               |  2 +-
 manifests/crd.yaml        |  2 +-
 manifests/deployment.yaml | 11 ++++++++++-
 3 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/docs/crd.md b/docs/crd.md
index da185639..eeae3e16 100644
--- a/docs/crd.md
+++ b/docs/crd.md
@@ -570,7 +570,7 @@ Settings to define storage to back the jupyter server.
         <td>false</td>
       </tr><tr>
         <td><b>size</b></td>
-        <td>string</td>
+        <td>int or string</td>
         <td>
           Size of the PVC or sizeLimit of the emptyDir volume which backs the session respectively.<br/>
           <br/>
diff --git a/manifests/crd.yaml b/manifests/crd.yaml
index 280b178e..cf19bcf9 100644
--- a/manifests/crd.yaml
+++ b/manifests/crd.yaml
@@ -266,7 +266,7 @@ spec:
                       description:
                         Size of the PVC or sizeLimit of the emptyDir volume which backs the
                         session respectively.
-                      type: string
+                      x-kubernetes-int-or-string: true
                   type: object
               type: object
             status:
diff --git a/manifests/deployment.yaml b/manifests/deployment.yaml
index 26d94ab8..618d54f2 100644
--- a/manifests/deployment.yaml
+++ b/manifests/deployment.yaml
@@ -33,7 +33,10 @@ spec:
       containers:
         - name: amalthea
           securityContext:
-            {}
+            allowPrivilegeEscalation: false
+            runAsGroup: 1000
+            runAsNonRoot: true
+            runAsUser: 1000
           image: "renku/amalthea:latest"
           imagePullPolicy: IfNotPresent
           livenessProbe:
@@ -73,6 +76,12 @@ spec:
               value: "30"
             - name: CPU_USAGE_MILLICORES_IDLE_THRESHOLD
               value: "500"
+            - name: METRICS_ENABLED
+              value: "false"
+            - name: METRICS_PORT
+              value: "8765"
+            - name: METRICS_EXTRA_LABELS
+              value: "[]"
           volumeMounts:
             - name: config
               mountPath: /app/config