diff --git a/kubernetes/infrastructure/coredns-config/configmap.yaml b/kubernetes/infrastructure/coredns-config/configmap.yaml
index 7e92966b..e4d38fe3 100644
--- a/kubernetes/infrastructure/coredns-config/configmap.yaml
+++ b/kubernetes/infrastructure/coredns-config/configmap.yaml
@@ -3,6 +3,10 @@ kind: ConfigMap
 metadata:
   name: coredns
   namespace: kube-system
+  # Talos owns this ConfigMap (bootstrap manifest). Flux must not delete it
+  # when this file is removed.
+  annotations:
+    kustomize.toolkit.fluxcd.io/prune: disabled
 data:
   Corefile: |
     # Delegate renner.uno to the in-cluster k8s_gateway resolver. It