diff --git a/inventory/sample/group_vars/k8s_cluster/addons.yml b/inventory/sample/group_vars/k8s_cluster/addons.yml
index b40da6c75cf001f423dc4587757b0de2c6fcbc43..7177803a0007ace7e9b2b2c7b469902c83feb264 100644
--- a/inventory/sample/group_vars/k8s_cluster/addons.yml
+++ b/inventory/sample/group_vars/k8s_cluster/addons.yml
@@ -161,6 +161,12 @@ cert_manager_enabled: false
 #   -----END CERTIFICATE-----
 # cert_manager_leader_election_namespace: kube-system
 
+# cert_manager_dns_policy: "ClusterFirst"
+# cert_manager_dns_config:
+#   nameservers:
+#     - "1.1.1.1"
+#     - "8.8.8.8"
+
 # MetalLB deployment
 metallb_enabled: false
 metallb_speaker_enabled: "{{ metallb_enabled }}"
diff --git a/roles/kubernetes-apps/ingress_controller/cert_manager/defaults/main.yml b/roles/kubernetes-apps/ingress_controller/cert_manager/defaults/main.yml
index b12a1a97ce4360f48cf30d27d3d1ef19915d0eba..bd3d2fefa2257f3ebfeff465bda25199c32b6ac8 100644
--- a/roles/kubernetes-apps/ingress_controller/cert_manager/defaults/main.yml
+++ b/roles/kubernetes-apps/ingress_controller/cert_manager/defaults/main.yml
@@ -4,6 +4,9 @@ cert_manager_user: 1001
 cert_manager_tolerations: []
 cert_manager_affinity: {}
 cert_manager_nodeselector: {}
+cert_manager_dns_policy: "ClusterFirst"
+cert_manager_dns_config: {}
+
 
 ## Change leader election namespace when deploying on GKE Autopilot that forbid the changes on kube-system namespace.
 ## See https://github.com/jetstack/cert-manager/issues/3717
diff --git a/roles/kubernetes-apps/ingress_controller/cert_manager/templates/cert-manager.yml.j2 b/roles/kubernetes-apps/ingress_controller/cert_manager/templates/cert-manager.yml.j2
index a5185ae7d6e15cea0fa4a3debddd1f0468d2caeb..9696d51567ae1cd9f5cece2bd1e1c01a72caee8c 100644
--- a/roles/kubernetes-apps/ingress_controller/cert_manager/templates/cert-manager.yml.j2
+++ b/roles/kubernetes-apps/ingress_controller/cert_manager/templates/cert-manager.yml.j2
@@ -976,6 +976,13 @@ spec:
       affinity:
         {{ cert_manager_affinity | to_nice_yaml | indent(width=8) }}
 {% endif %}
+{% if cert_manager_dns_policy %}
+      dnsPolicy: {{ cert_manager_dns_policy }}
+{% endif %}
+{% if cert_manager_dns_config %}
+      dnsConfig:
+        {{ cert_manager_dns_config | to_nice_yaml | indent(width=8) }}
+{% endif %}
 {% if cert_manager_trusted_internal_ca is defined %}
           volumeMounts:
           - mountPath: /etc/ssl/certs/internal-ca.pem