diff --git a/bm_mcc_mosk/utils/tsl_gen.sh b/bm_mcc_mosk/utils/tsl_gen.sh
index 736c4de..41af942 100644
--- a/bm_mcc_mosk/utils/tsl_gen.sh
+++ b/bm_mcc_mosk/utils/tsl_gen.sh
@@ -59,4 +59,4 @@
 cfssl gencert -initca ca-csr.json | cfssljson -bare ca
 cfssl gencert -ca=ca.pem -ca-key=ca-key.pem --config=ca-config.json -profile=kubernetes server-csr.json | cfssljson -bare server
 popd
-python3 tsl_to_yaml.py
\ No newline at end of file
+python3 /root/bm_mcc_mosk/utils/tsl_to_yaml.py
\ No newline at end of file
diff --git a/bm_mcc_mosk/utils/tsl_to_yaml.py b/bm_mcc_mosk/utils/tsl_to_yaml.py
index d2c1292..8c3b416 100644
--- a/bm_mcc_mosk/utils/tsl_to_yaml.py
+++ b/bm_mcc_mosk/utils/tsl_to_yaml.py
@@ -61,7 +61,7 @@
     with open(path, "r") as certfile:
         secrets_template["stringData"][f] = certfile.read()
 
-out_file_path = "/root/child/osdpl-ssl-secrets.yaml"
+out_file_path = "/root/bm_mcc_mosk/child/kaas_workloads/osdpl-ssl-secrets.yaml"
 
 with open(out_file_path, "w") as f:
     yaml.dump(secrets_template, f)
diff --git a/bm_mcc_mosk/utils/update_kube_dns_conf.py b/bm_mcc_mosk/utils/update_kube_dns_conf.py
new file mode 100644
index 0000000..3658a21
--- /dev/null
+++ b/bm_mcc_mosk/utils/update_kube_dns_conf.py
@@ -0,0 +1,20 @@
+import sys
+import yaml
+
+assert len(sys.argv) > 1
+internal_ip = sys.argv[1]
+domain = "subdomain.team.sustaining"
+template = """
+{domain}:53 {{
+    errors
+    cache 30
+    forward . {internal_ip}
+}}"""
+with open("/root/coredns.conf", "r") as f:
+    content = yaml.safe_load(f)
+content['data']['Corefile'] += template.format(
+    domain=domain, internal_ip=internal_ip)
+
+out_file_path = "/root/coredns.patched.conf"
+with open(out_file_path, "w") as f:
+    yaml.safe_dump(content, f)