diff --git a/roles/dnsmasq/tasks/main.yml b/roles/dnsmasq/tasks/main.yml
index 887848532..259d4f50a 100644
--- a/roles/dnsmasq/tasks/main.yml
+++ b/roles/dnsmasq/tasks/main.yml
@@ -35,7 +35,12 @@
     backup: yes
   register: dnsmasq_config
 
-- name: Stat dnsmasq configuration
+- name: Stat dnsmasq link
+  stat:
+    path: /etc/dnsmasq.d-available/01-kube-dns.conf
+  register: dnsmasq_stat
+
+- name: Stat dnsmasq link
   stat:
     path: /etc/dnsmasq.d/01-kube-dns.conf
   register: sym
diff --git a/roles/dnsmasq/templates/dnsmasq-deploy.yml b/roles/dnsmasq/templates/dnsmasq-deploy.yml
index c1bb614ec..ed74c3e06 100644
--- a/roles/dnsmasq/templates/dnsmasq-deploy.yml
+++ b/roles/dnsmasq/templates/dnsmasq-deploy.yml
@@ -12,11 +12,14 @@ spec:
   selector:
     matchLabels:
       k8s-app: dnsmasq
+  strategy:
+    type: "Recreate"
   template:
     metadata:
       labels:
         k8s-app: dnsmasq
         kubernetes.io/cluster-service: "true"
+        kargo/dnsmasq-checksum: "{{ dnsmasq_stat.stat.checksum }}"
     spec:
       containers:
         - name: dnsmasq