diff --git a/fast/stages/2-networking-a-peering/data/dns-policy-rules.yaml b/fast/stages/2-networking-a-peering/data/dns-policy-rules.yaml
index f157cec02b..94cfb4f840 100644
--- a/fast/stages/2-networking-a-peering/data/dns-policy-rules.yaml
+++ b/fast/stages/2-networking-a-peering/data/dns-policy-rules.yaml
@@ -81,6 +81,12 @@ googleapis-restricted:
 gstatic-all:
   dns_name: "*.gstatic.com."
   local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
+kernels-gu:
+  dns_name: "kernels.googleusercontent.com."
+  local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
+kernels-gu-all:
+  dns_name: "*.kernels.googleusercontent.com."
+  local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
 notebooks-all:
   dns_name: "*.notebooks.cloud.google.com."
   local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
diff --git a/fast/stages/2-networking-b-vpn/data/dns-policy-rules.yaml b/fast/stages/2-networking-b-vpn/data/dns-policy-rules.yaml
index f157cec02b..94cfb4f840 100644
--- a/fast/stages/2-networking-b-vpn/data/dns-policy-rules.yaml
+++ b/fast/stages/2-networking-b-vpn/data/dns-policy-rules.yaml
@@ -81,6 +81,12 @@ googleapis-restricted:
 gstatic-all:
   dns_name: "*.gstatic.com."
   local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
+kernels-gu:
+  dns_name: "kernels.googleusercontent.com."
+  local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
+kernels-gu-all:
+  dns_name: "*.kernels.googleusercontent.com."
+  local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
 notebooks-all:
   dns_name: "*.notebooks.cloud.google.com."
   local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
diff --git a/fast/stages/2-networking-c-nva/data/dns-policy-rules.yaml b/fast/stages/2-networking-c-nva/data/dns-policy-rules.yaml
index f157cec02b..94cfb4f840 100644
--- a/fast/stages/2-networking-c-nva/data/dns-policy-rules.yaml
+++ b/fast/stages/2-networking-c-nva/data/dns-policy-rules.yaml
@@ -81,6 +81,12 @@ googleapis-restricted:
 gstatic-all:
   dns_name: "*.gstatic.com."
   local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
+kernels-gu:
+  dns_name: "kernels.googleusercontent.com."
+  local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
+kernels-gu-all:
+  dns_name: "*.kernels.googleusercontent.com."
+  local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
 notebooks-all:
   dns_name: "*.notebooks.cloud.google.com."
   local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
diff --git a/fast/stages/2-networking-d-separate-envs/data/dns-policy-rules.yaml b/fast/stages/2-networking-d-separate-envs/data/dns-policy-rules.yaml
index f157cec02b..94cfb4f840 100644
--- a/fast/stages/2-networking-d-separate-envs/data/dns-policy-rules.yaml
+++ b/fast/stages/2-networking-d-separate-envs/data/dns-policy-rules.yaml
@@ -81,6 +81,12 @@ googleapis-restricted:
 gstatic-all:
   dns_name: "*.gstatic.com."
   local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
+kernels-gu:
+  dns_name: "kernels.googleusercontent.com."
+  local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
+kernels-gu-all:
+  dns_name: "*.kernels.googleusercontent.com."
+  local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
 notebooks-all:
   dns_name: "*.notebooks.cloud.google.com."
   local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
diff --git a/fast/stages/2-networking-e-nva-bgp/data/dns-policy-rules.yaml b/fast/stages/2-networking-e-nva-bgp/data/dns-policy-rules.yaml
index f157cec02b..94cfb4f840 100644
--- a/fast/stages/2-networking-e-nva-bgp/data/dns-policy-rules.yaml
+++ b/fast/stages/2-networking-e-nva-bgp/data/dns-policy-rules.yaml
@@ -81,6 +81,12 @@ googleapis-restricted:
 gstatic-all:
   dns_name: "*.gstatic.com."
   local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
+kernels-gu:
+  dns_name: "kernels.googleusercontent.com."
+  local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
+kernels-gu-all:
+  dns_name: "*.kernels.googleusercontent.com."
+  local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
 notebooks-all:
   dns_name: "*.notebooks.cloud.google.com."
   local_data: { CNAME: { rrdatas: ["private.googleapis.com."] } }
diff --git a/tests/fast/stages/s2_networking_a_peering/stage.yaml b/tests/fast/stages/s2_networking_a_peering/stage.yaml
index 7c9212b61e..a3d11ec5c8 100644
--- a/tests/fast/stages/s2_networking_a_peering/stage.yaml
+++ b/tests/fast/stages/s2_networking_a_peering/stage.yaml
@@ -14,4 +14,4 @@
 
 counts:
   modules: 28
-  resources: 145
+  resources: 147
diff --git a/tests/fast/stages/s2_networking_b_vpn/stage.yaml b/tests/fast/stages/s2_networking_b_vpn/stage.yaml
index 3c65fddf2f..3ddca61700 100644
--- a/tests/fast/stages/s2_networking_b_vpn/stage.yaml
+++ b/tests/fast/stages/s2_networking_b_vpn/stage.yaml
@@ -14,4 +14,4 @@
 
 counts:
   modules: 30
-  resources: 182
+  resources: 184
diff --git a/tests/fast/stages/s2_networking_c_nva/stage.yaml b/tests/fast/stages/s2_networking_c_nva/stage.yaml
index 4313644822..6cfcb15c04 100644
--- a/tests/fast/stages/s2_networking_c_nva/stage.yaml
+++ b/tests/fast/stages/s2_networking_c_nva/stage.yaml
@@ -14,4 +14,4 @@
 
 counts:
   modules: 42
-  resources: 192
+  resources: 194
diff --git a/tests/fast/stages/s2_networking_d_separate_envs/stage.yaml b/tests/fast/stages/s2_networking_d_separate_envs/stage.yaml
index 701e186af1..db0e5f3883 100644
--- a/tests/fast/stages/s2_networking_d_separate_envs/stage.yaml
+++ b/tests/fast/stages/s2_networking_d_separate_envs/stage.yaml
@@ -14,4 +14,4 @@
 
 counts:
   modules: 21
-  resources: 165
+  resources: 169
diff --git a/tests/fast/stages/s2_networking_e_nva_bgp/stage.yaml b/tests/fast/stages/s2_networking_e_nva_bgp/stage.yaml
index 66338505f8..ab5d08e071 100644
--- a/tests/fast/stages/s2_networking_e_nva_bgp/stage.yaml
+++ b/tests/fast/stages/s2_networking_e_nva_bgp/stage.yaml
@@ -14,4 +14,4 @@
 
 counts:
   modules: 36
-  resources: 203
+  resources: 205