diff --git a/cluster/addons/dns/coredns/coredns.yaml.base b/cluster/addons/dns/coredns/coredns.yaml.base
index 3556f68007..f89f56a740 100644
--- a/cluster/addons/dns/coredns/coredns.yaml.base
+++ b/cluster/addons/dns/coredns/coredns.yaml.base
@@ -66,6 +66,7 @@ data:
         health
         kubernetes __PILLAR__DNS__DOMAIN__ in-addr.arpa ip6.arpa {
             pods insecure
+            upstream
             fallthrough in-addr.arpa ip6.arpa
             ttl 30
         }
diff --git a/cluster/addons/dns/coredns/coredns.yaml.in b/cluster/addons/dns/coredns/coredns.yaml.in
index 4d0edebaba..c70c8bff67 100644
--- a/cluster/addons/dns/coredns/coredns.yaml.in
+++ b/cluster/addons/dns/coredns/coredns.yaml.in
@@ -66,6 +66,7 @@ data:
         health
         kubernetes {{ pillar['dns_domain'] }} in-addr.arpa ip6.arpa {
             pods insecure
+            upstream
             fallthrough in-addr.arpa ip6.arpa
             ttl 30
         }
diff --git a/cluster/addons/dns/coredns/coredns.yaml.sed b/cluster/addons/dns/coredns/coredns.yaml.sed
index aa6a8061f9..556afa7604 100644
--- a/cluster/addons/dns/coredns/coredns.yaml.sed
+++ b/cluster/addons/dns/coredns/coredns.yaml.sed
@@ -66,6 +66,7 @@ data:
         health
         kubernetes $DNS_DOMAIN in-addr.arpa ip6.arpa {
             pods insecure
+            upstream
             fallthrough in-addr.arpa ip6.arpa
             ttl 30
         }