diff --git a/deploy/kubectl/deployment.yaml b/deploy/kubectl/deployment.yaml
index cf40ada..d48d78a 100644
--- a/deploy/kubectl/deployment.yaml
+++ b/deploy/kubectl/deployment.yaml
@@ -27,3 +27,31 @@ spec:
         args:
         - "--https-listen-port=0"
         - "--http-listen-port=8989"
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kube-explorer-shell
+  namespace: kube-system
+  labels:
+    app: kube-explorer-shell
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: kube-explorer-shell
+  template:
+    metadata:
+      namespace: kube-system
+      labels:
+        app: kube-explorer-shell
+    spec:
+      serviceAccountName: kube-explorer
+      containers:
+      - image: rancher/shell:v0.1.6
+        imagePullPolicy: IfNotPresent
+        name: shell
+        stdin: true
+        tty: true
+        securityContext:
+          runAsUser: 0