diff --git a/shared/networkpolicies/allow-to-public-web-http-challenge.yaml b/shared/networkpolicies/allow-to-public-web-http-challenge.yaml
index 12eef6c6f03ac6e1d64959a359be18e0a2eeb29a..e6b05d49f7d43754982f8ea80895978bdbf57230 100644
--- a/shared/networkpolicies/allow-to-public-web-http-challenge.yaml
+++ b/shared/networkpolicies/allow-to-public-web-http-challenge.yaml
@@ -17,6 +17,18 @@ spec:
     ports:
       - protocol: TCP
         port: 80
+  - to:
+      - namespaceSelector:
+          matchLabels:
+            kubernetes.io/metadata.name: kube-system
+        podSelector:
+          matchLabels:
+            k8s-app: kube-dns
+    ports:
+      - port: 53
+        protocol: UDP
+      - port: 53
+        protocol: TCP
   policyTypes:
   - Egress
   podSelector: