diff --git a/cmd/kubeadm/app/phases/addons/dns/manifests.go b/cmd/kubeadm/app/phases/addons/dns/manifests.go
index 51709b0de5a..34f2adc3679 100644
--- a/cmd/kubeadm/app/phases/addons/dns/manifests.go
+++ b/cmd/kubeadm/app/phases/addons/dns/manifests.go
@@ -316,6 +316,7 @@ data:
         health
         kubernetes {{ .DNSDomain }} in-addr.arpa ip6.arpa {
            pods insecure
+           upstream
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
         }{{ .Federation }}