diff --git a/charts/bigdata-notebook-workspace/templates/deployment.yaml b/charts/bigdata-notebook-workspace/templates/deployment.yaml
index 0e9a87c..b8d9cfe 100644
--- a/charts/bigdata-notebook-workspace/templates/deployment.yaml
+++ b/charts/bigdata-notebook-workspace/templates/deployment.yaml
@@ -52,8 +52,7 @@ spec:
             - containerPort: {{ .Values.containerPort.port }}
               name: {{ .Values.containerPort.name }}
           command:
-            - start-notebook.sh 
-            - --allow-root
+            - start-notebook.py
           args:
           {{- range $key, $value := .Values.server }}
             - --ServerApp.{{ $key | snakecase }}={{$value}}
diff --git a/charts/bigdata-notebook-workspace/values.yaml b/charts/bigdata-notebook-workspace/values.yaml
index a347a5b..124b26c 100644
--- a/charts/bigdata-notebook-workspace/values.yaml
+++ b/charts/bigdata-notebook-workspace/values.yaml
@@ -58,8 +58,9 @@ volume:
   mountPath: /home/jovyan
 
 podSecurityContext:
-  runAsUser: 0
-  fsGroup: 0
+  runAsNonRoot: true
+  runAsUser: 1000
+  fsGroup: 100
 
 containerPort:
   port: 8888