From 5bf5b84f15d013bb2d94758b6a0da3237c4aff4f Mon Sep 17 00:00:00 2001 From: Paul Gottschling Date: Mon, 27 Apr 2026 09:24:06 -0400 Subject: [PATCH] Correct node name validation notes (#65457) Edit the `ssh_service` configuration reference partial and troubleshooting guide for enrolling servers to address feedback that came up after we merged #64632. --- .../server-access/troubleshooting-server.mdx | 7 ++++--- docs/pages/includes/config-reference/instance-wide.yaml | 7 +++++-- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/docs/pages/enroll-resources/server-access/troubleshooting-server.mdx b/docs/pages/enroll-resources/server-access/troubleshooting-server.mdx index 0b7798c1802..6024336d133 100644 --- a/docs/pages/enroll-resources/server-access/troubleshooting-server.mdx +++ b/docs/pages/enroll-resources/server-access/troubleshooting-server.mdx @@ -181,9 +181,10 @@ Service validates the name of the server against the following pattern: ^[a-zA-Z0-9]+[a-zA-Z0-9\.-]*$ ``` -In other words, each server's name must begin with an alphanumeric character and -contain only alphanumeric characters, dots, and hyphens. If a node name violates -this pattern, the Auth Service replaces it with a UUID. +Each server's name must begin with an alphanumeric character and contain only +alphanumeric characters, dots, and hyphens. If a node name violates this +pattern, or exceeds 256 characters in length, the Auth Service replaces it with +a UUID (the server's Teleport resource ID). You can check whether any host names are invalid by adding the `-v` flag when listing servers: diff --git a/docs/pages/includes/config-reference/instance-wide.yaml b/docs/pages/includes/config-reference/instance-wide.yaml index ca6104f1566..a4e5596f0b4 100644 --- a/docs/pages/includes/config-reference/instance-wide.yaml +++ b/docs/pages/includes/config-reference/instance-wide.yaml @@ -10,8 +10,11 @@ teleport: # reached by. By default it's equal to hostname. # # For Teleport-protected SSH servers, nodename must begin with an alphanumeric - # character and contain only alphanumeric characters, dots, and hyphens. - # Teleport replaces servers with invalid hostnames with random UUIDs. + # character, contain only alphanumeric characters, dots, and hyphens, and be + # no more than 256 characters in length. + # + # If a Teleport-protected server has an invalid nodename, Teleport replaces + # the nodename with the resource ID. nodename: graviton # Data directory where Teleport daemon keeps its data.