diff --git a/kube/services/jobs/arborist-rm-expired-access-cronjob.yaml b/kube/services/jobs/arborist-rm-expired-access-cronjob.yaml
index 8a21c857c..d8859c732 100644
--- a/kube/services/jobs/arborist-rm-expired-access-cronjob.yaml
+++ b/kube/services/jobs/arborist-rm-expired-access-cronjob.yaml
@@ -42,3 +42,8 @@ spec:
                 # run job to remove expired access from the database
                 /go/src/github.com/uc-cdis/arborist/jobs/delete_expired_access
           restartPolicy: Never
+          dnsConfig:
+            options:
+            - name: use-vc
+            - name: single-request-reopen
+          dnsPolicy: ClusterFirst
diff --git a/kube/services/jobs/arborist-rm-expired-access-job.yaml b/kube/services/jobs/arborist-rm-expired-access-job.yaml
index dfbff7e2c..34833dded 100644
--- a/kube/services/jobs/arborist-rm-expired-access-job.yaml
+++ b/kube/services/jobs/arborist-rm-expired-access-job.yaml
@@ -9,6 +9,11 @@ spec:
         app: gen3job
     spec:
       automountServiceAccountToken: false
+      dnsConfig:
+        options:
+        - name: use-vc
+        - name: single-request-reopen
+      dnsPolicy: ClusterFirst
       volumes:
         - name: arborist-secret
           secret: