fix: use sanitized hostname

jsiebens · Apr 26, 2022 · 8686d0f · 8686d0f
1 parent 9290db5
commit 8686d0f
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/cmd/server/tailscale_attestor/main.go b/cmd/server/tailscale_attestor/main.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"fmt"
 	"sync"
+	"tailscale.com/util/dnsname"
 
 	"github.com/hashicorp/hcl"
 	"github.com/spiffe/go-spiffe/v2/spiffeid"
@@ -71,7 +72,8 @@ func (p *Plugin) Attest(stream nodeattestorv1.NodeAttestor_AttestServer) error {
 		return fmt.Errorf("unable to find provided client key")
 	}
 
-	id, err := agentID(c.trustDomain, fmt.Sprintf("/%s/%s", PluginName, node.HostName))
+	sanitizeHostname := dnsname.SanitizeHostname(node.HostName)
+	id, err := agentID(c.trustDomain, fmt.Sprintf("/%s/%s", PluginName, sanitizeHostname))
 	if err != nil {
 		return err
 	}