diff --git a/README.md b/README.md
index 1565285..b4e809e 100644
--- a/README.md
+++ b/README.md
@@ -41,6 +41,10 @@ Role Variables
 
 > rke2_containerd_device_ownership_from_security_context: true
 
+### Change cluster domain
+
+> rke2_cluster_domain: domain.example.net
+
 # The following variables are applied to nodes
 ### choose the node type
 > rke2_node_type: 'server' \
diff --git a/templates/rke2-config.yaml.j2 b/templates/rke2-config.yaml.j2
index 05d1bec..a1f8be9 100644
--- a/templates/rke2-config.yaml.j2
+++ b/templates/rke2-config.yaml.j2
@@ -19,6 +19,9 @@ disable:
 {% for line in rke2_disable %}
   - {{line}}
 {% endfor %}
+{% if rke2_cluster_domain is defined%}
+cluster-domain: {{ rke2_cluster_domain }}
+{% endif %}
 {% endif %}
 {% if rke2_kube_api_server_args is defined %}
 kube-apiserver-arg: