diff --git a/system/percona-xtradb-cluster-operator/Chart.yaml b/system/percona-xtradb-cluster-operator/Chart.yaml
index 7950bbc53d..402539f8e9 100644
--- a/system/percona-xtradb-cluster-operator/Chart.yaml
+++ b/system/percona-xtradb-cluster-operator/Chart.yaml
@@ -4,7 +4,7 @@ name: percona-xtradb-cluster-operator
 description: A Helm chart to install Percona XtraDB Cluster Operator.
 home: "https://github.com/sapcc/helm-charts/tree/master/system/percona-xtradb-cluster-operator"
 type: application
-version: 0.2.2
+version: 0.2.3
 appVersion: "1.15.1"
 kubeVersion: ">=1.26.0-0"
 maintainers:
diff --git a/system/percona-xtradb-cluster-operator/values.yaml b/system/percona-xtradb-cluster-operator/values.yaml
index e16004db63..c84a3eade7 100644
--- a/system/percona-xtradb-cluster-operator/values.yaml
+++ b/system/percona-xtradb-cluster-operator/values.yaml
@@ -93,7 +93,7 @@ kube-state-metrics:
     registry: keppel.global.cloud.sap/ccloud-registry-k8s-io-mirror
     repository: kube-state-metrics/kube-state-metrics
   rbac:
-    create: true  # NOTE: need to create a custom role instead with access only to custom resources
+    create: true  # only a limited role is created, because all collectors are disabled, except custom-resource-state
     extraRules:
       - apiGroups: ["pxc.percona.com"]
         resources:
@@ -114,6 +114,7 @@ kube-state-metrics:
 
   selfMonitor:
     enabled: true
+  prometheusScrape: false  # don't set prometheus.io/scrape annotation on kube-state-metrics service, because we use ServiceMonitor
 
   collectors: null