nodePlacement provides explicit control over the scheduling of dns pods.
Generally, it is useful to run a dns pod on every node so that dns queries are always handled by a local dns pod instead of going over the network to a dns pod on another node. However, security policies may require restricting the placement of dns pods to specific nodes. For example, if a security policy prohibits pods on arbitrary nodes from communicating with the API, a node selector can be specified to restrict dns pods to nodes that are permitted to communicate with the API. Conversely, if running dns pods on nodes with a particular taint is desired, a toleration can be specified for that taint.
If unset, defaults are used. See nodePlacement for more details.