diff --git a/docs/k8s-deployment.yaml b/docs/k8s-deployment.yaml
index 0b14f1f..19910b7 100644
--- a/docs/k8s-deployment.yaml
+++ b/docs/k8s-deployment.yaml
@@ -1,4 +1,35 @@
 # used by ../skaffold.yaml
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: mc-router
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: services-watcher
+rules:
+  - apiGroups: [""]
+    resources: ["services"]
+    verbs: ["watch","list"]
+  - apiGroups: ["apps"]
+    resources: ["statefulsets", "statefulsets/scale"]
+    verbs: ["watch","list","get","update"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: mc-router-services-watcher
+subjects:
+  - kind: ServiceAccount
+    name: mc-router
+    namespace: default
+roleRef:
+  kind: ClusterRole
+  name: services-watcher
+  apiGroup: rbac.authorization.k8s.io
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -21,7 +52,10 @@ spec:
       - image: itzg/mc-router:latest
         name: mc-router
         # Add "--auto-scale-up" here for https://github.com/itzg/mc-router/#auto-scale-up
-        args: ["--api-binding", ":8080", "--in-kube-cluster"]
+        args:
+          - --api-binding
+          - :8080
+          - --in-kube-cluster
         ports:
         - name: proxy
           containerPort: 25565
diff --git a/skaffold.yaml b/skaffold.yaml
index 1dd0b67..68eeed0 100644
--- a/skaffold.yaml
+++ b/skaffold.yaml
@@ -1,4 +1,4 @@
-apiVersion: skaffold/v2beta26
+apiVersion: skaffold/v4beta13
 kind: Config
 metadata:
   name: mc-router
@@ -8,7 +8,8 @@ build:
     # https://skaffold.dev/docs/pipeline-stages/builders/ko/
     ko:
       main: ./cmd/mc-router/
+manifests:
+  rawYaml:
+  - docs/k8s-deployment.yaml
 deploy:
   kubectl:
-    manifests:
-    - docs/k8s-deployment.yaml