Hi team,

I’m trying to configure CoreDNS in a Kubernetes cluster so that only a specific set of external domains are allowed for DNS resolution, and all other external domains should be blocked

Example use case:

Allow only *.mycompany.com, amazonaws.com, and github.com

Block everything else (like google.com, dodgy.site.com, etc.)

Questions:

Is there a recommended plugin or configuration approach for DNS whitelisting?
Any examples or community patterns for production-grade DNS allowlists?