antrea: Antrea wildcard fqdn netpolicy not working

Describe the bug According to the netpol documentation, one could use example like the following to match fqdn:

apiVersion: crd.antrea.io/v1alpha1
kind: ClusterNetworkPolicy
metadata:
  name: acnp-fqdn
spec:
  priority: 1
  appliedTo:
  - podSelector: {}
  egress:
  - action: Allow
    to:
      - fqdn: "*.google.com"

I also have a cluster netpol default-deny priority 999 on Baseline. So by default all traffic should be denied except traffic to google. The problem is if that I try to curl www.google.com from the container it is still being denied by the default-deny baseline rule. If I change the fqdn policy to allow “www.google.com” instead of “*.google.com” it does work, so for some reason the wildcard fqdn is not working.

To Reproduce

1. Create a FQDN wildcard policy that match all pods and higher priority
2. Create a default-deny policy with the lowest priority that also match all pods
3. Try to access some URL from the FQDN Expected It should work ’ Actual behavior The wildcard FQDN is not matching, only a expressed FQDN works.

Versions:

• Antrea version: 1.6.0
• Kubernetes version (use kubectl version). 1.22.8
• Container runtime: crio-o

Additional info: There are some other rules that allows the pods resolve DNS for example, but I removed those from the context because it is not related to the context of the problem.