SPAG

gravitational · Jan 23, 2025 · 4f2e1a9 · 4f2e1a9
1 parent 91e5c89
commit 4f2e1a9
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 5 deletions.
diff --git a/docs/cspell.json b/docs/cspell.json
@@ -998,6 +998,7 @@
     "webproxy",
     "webui",
     "westeurope",
+    "WIMSE",
     "winadj",
     "windowsaccountname",
     "windowsdesktop",

diff --git a/docs/pages/reference/cli/tbot.mdx b/docs/pages/reference/cli/tbot.mdx
@@ -528,7 +528,7 @@ command supports these additional flags:
 | `--reader-user`                          | An additional user name or UID that should be allowed by ACLs to read this destination. Only valid for file destinations on Linux. |
 | `--reader-group`                         | An additional group name or GID that should be allowed by ACLs to read this destination. Only valid for file destinations on Linux. |
 | `--[no-]include-federated-trust-bundles` | If set, include federated trust bundles in the output |
-| `--name-selector` | Specifies a WorkloadIdentity resource by name to use when issuing the X509 for a workload. Mutually exclusiv with `--label-selector`. |
+| `--name-selector` | Specifies a WorkloadIdentity resource by name to use when issuing the X509 for a workload. Mutually exclusive with `--label-selector`. |
 | `--label-selector` | Specifies a set of labels to use when selecting WorkloadIdentity resources to use when issuing the X509 for a workload. Mutually exclusive with `--name-selector`. |
 
 ## tbot start workload-identity-api
@@ -550,7 +550,7 @@ command supports these additional flags:
 | Flag                 | Description |
 |----------------------|-------------|
 | `--listen` | A socket URI to listen on, e.g. `tcp://localhost:1234` or `unix:///opt/workload-identity.sock`. Required. |
-| `--name-selector` | Specifies a WorkloadIdentity resource by name to use when issuing the X509 for a workload. Mutually exclusiv with `--label-selector`. |
+| `--name-selector` | Specifies a WorkloadIdentity resource by name to use when issuing the X509 for a workload. Mutually exclusive with `--label-selector`. |
 | `--label-selector` | Specifies a set of labels to use when selecting WorkloadIdentity resources to use when issuing the X509 for a workload. Mutually exclusive with `--name-selector`. |
 
 ## tbot start spiffe-svid

diff --git a/docs/pages/reference/workload-identity/identity-attributes.mdx b/docs/pages/reference/workload-identity/identity-attributes.mdx
@@ -6,7 +6,7 @@ description: Information about the identity attributes that can be used in Workl
 ## Join Attributes
 
 Join attributes are sourced from the join process that the Bot underwent. These
-typically allow you to identify the machine that the `tbot` agent is runnign on.
+typically allow you to identify the machine that the `tbot` agent is running on.
 
 ### `join.meta`
 
@@ -37,7 +37,7 @@ join.
 
 ### `join.spacelift`
 
-### `join.terrraform_cloud`
+### `join.terraform_cloud`
 
 ### `join.tpm`
 

diff --git a/docs/pages/reference/workload-identity/workload-identity-resource.mdx b/docs/pages/reference/workload-identity/workload-identity-resource.mdx
@@ -80,7 +80,7 @@ spec:
     #
     # If no allow rules are specified, then the WorkloadIdentity can be issued
     # to any workload with the correct workload_identity_labels within their
-    # roleset.
+    # role set.
     allow:
     # Each rule consists of a set of conditions. All conditions must pass in
     # order for the rule to be considered a match. This effectively creates an