diff --git a/workloads/kube-system/coredns-config.yml b/workloads/kube-system/coredns-config.yml
new file mode 100644
index 0000000..e47c334
--- /dev/null
+++ b/workloads/kube-system/coredns-config.yml
@@ -0,0 +1,30 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    addonmanager.kubernetes.io/mode: EnsureExists
+    k8s-app: kube-dns
+  name: coredns
+  namespace: kube-system
+data:
+  Corefile: |
+    .:53 {
+        errors
+        health {
+          lameduck 5s
+        }
+        ready
+        log . {
+          class error
+        }
+        kubernetes cluster.local in-addr.arpa ip6.arpa {
+          pods insecure
+          fallthrough in-addr.arpa ip6.arpa
+        }
+        prometheus :9153
+        forward . 10.30.14.1
+        cache 30
+        loop
+        reload
+        loadbalance
+    }