IDN resolution doesn't work.

[thesmiler]

The following FQDNNetowrkPolicy:

apiVersion: networking.gke.io/v1alpha1
kind: FQDNNetworkPolicy
metadata:
  name: fqdnnetworkpolicy-v6
spec:
  podSelector: {}
  egress:
    - to:
      - fqdns:
        - ipv6.kühlers.com
        - dualstack.kühlers.com
      ports:
      - port: 443
        protocol: TCP

creates the following network policy:

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  annotations:
    fqdnnetworkpolicies.networking.gke.io/owned-by: fqdnnetworkpolicy-v6
  creationTimestamp: "2021-03-04T15:31:13Z"
  generation: 1
  managedFields:
  - apiVersion: networking.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:fqdnnetworkpolicies.networking.gke.io/owned-by: {}
      f:spec:
        f:policyTypes: {}
    manager: manager
    operation: Update
    time: "2021-03-04T15:31:13Z"
  name: fqdnnetworkpolicy-v6
  namespace: default
  resourceVersion: "32427619"
  selfLink: /apis/networking.k8s.io/v1/namespaces/default/networkpolicies/fqdnnetworkpolicy-v6
  uid: 1850667c-73f5-4f71-aed3-e26b17dc3ee0
spec:
  podSelector: {}
  policyTypes:
  - Egress

So IDN resolution doesn't seem to function properly.
This needs to be at least documented, it might be too complex to fix.

[MrTrustor]

uh. This seems to work on KIND but not on GKE. Can you help figure out why?

[thesmiler]

It didn't work on KIND for me. Maybe it depends on the locale of your machine or something?

[thesmiler]

what do you have as locale on your machine? I have everything set to en_US.UTF-8

[MrTrustor]

On my mac I have:

$ locale
LANG=""
LC_COLLATE="C"
LC_CTYPE="UTF-8"
LC_MESSAGES="C"
LC_MONETARY="C"
LC_NUMERIC="C"
LC_TIME="C"
LC_ALL=

Have you tested with the patch from #11 ?

[thesmiler]

I could not manage to get this working, it is somehow related to locale and inside the controller we use a very minimal image