diff --git a/install/0000_00_cluster-version-operator_03_deployment.yaml b/install/0000_00_cluster-version-operator_03_deployment.yaml
index 7b608829c7..bbdf07a956 100644
--- a/install/0000_00_cluster-version-operator_03_deployment.yaml
+++ b/install/0000_00_cluster-version-operator_03_deployment.yaml
@@ -66,7 +66,14 @@ spec:
                 fieldPath: spec.nodeName
           - name: CLUSTER_PROFILE
             value: {{ .ClusterProfile }}
-      dnsPolicy: ClusterFirstWithHostNet
+      # this pod is hostNetwork and uses the internal LB DNS name when possible, which the kubelet also uses.
+      # this dnsPolicy allows us to use the same dnsConfig as the kubelet, without access to read it ourselves.
+      dnsPolicy: Default
+      # The dnsConfig below doesn't work because the IP range for the service network is configurable.
+      # There is no easy spot to perform this injection, though the CVO could be made to look up and substitute the value.
+#      dnsConfig:
+#        nameservers:
+#          - 172.30.0.10
       hostNetwork: true
       nodeSelector:
         node-role.kubernetes.io/master: ""