CoreDNS plugin question

[mqmr]

[NOT A CONTRIBUTION]

Hello,

First of all big thanks for the great project!

I've been playing with it for some time and I wonder if there's a way to allow other, unrestricted, workloads to communicate with allow-listed endpoints directly, i.e. not via proxies.
I guess, that should be done at the DNS level, but with lack of CoreDNS knowledge, I cannot see how a DNS view could be created, so DNS rewrites happen to certain workloads only.

I'd appreciate for any advice.

Thank you!

[mqmr]

After googling for a bit, I'd assume, it'd be possible to achieve that with "policy/firewall" plugin - https://github.com/coredns/policy?tab=readme-ov-file#kubernetes-metadata-multi-tenancy-policy