.spelling

phillebaba
tberreis
allenmunC1
jeremycampbell
snorwin
JoeNorth
tanujd11
asapekia
pevidex
vinny
lauraseidler
ABWassim
ThatsMrTalbot
Pionerd
andrey-dubnik
bwaldrep
eplightning
findnature
gplessis
import-shiburin
lunarwhite
mangeshhambarde
pwhitehead-splunk
yann-soubeyrand
pinkfloydx33
karlschriek
cmcga1125
OIDs
rfc4514
SpectralHiss
weisdd
lvyanru8200
UseCertificateRequestBasicConstraints
mmontes11
lvyanru8200
vedauth
CVE-2022-41717
CVE-2023-29409
seccomp
RedHat
RoleBinding
RoleBindings
SecurityContextConstraint
Mehak
Saeed
acmesolver
startupapicheck
ServiceAccount
ServiceAccounts
mikebryant
jayme-github
nodeSelector
Compy
Adphi
ajvn
illrill
davidsbond
fvlaicu
facto
fao
4molybdenum2
jetstack-bot
codegen
yongk802
yanggangtony
andreadecorte
tasharnvb
devholic
jahrlin
johnwchadwick
joycebrum
jwenz723
seuf
thirdeyenick
MattiasGees
(sub)domains
7opf
ACLs
ACMEDNS
ACMEv1
ACMEv2
AdditionalFormats
AKS
ALB
APIService
APIServices
APIs
AWS
SDK
SDKs
Akamai
ANDed
Anthos
AppRole
approvers
ArgoCD
Arsh
ArtifactHUB
ArtifactHub
AzureDNS
BasicConstraints
BKPR
Bazel
Bitnami
BobyMCbobs
Bugfixes
bugfix
BundleSource
BundleTarget
BundleCondition
NamespaceSelector
CamelCase
CAs
CNAME
CNAMEs
CNI
CNIs
CRD
CRDs
CSI
CSIDriver
CSINode
CSR
CSRs
CVE
CVEs
Certbot
CertificateRequest
CertificateRequestPolicy
CertificateRequestPolicies
CertificateRequests
CertificateSecretTemplate
CertificateSigningRequest
CertificateSigningRequests
Changelog
changelog
ChartMuseum
CloudDNS
CloudFlare
Cloudflare
ClusterIssuer
ClusterIssuers
ClusterRole
ClusterRoles
ClusterServiceVersion
ConfigMap
CoreDNS
Coreutils
CronJob
CryptoKey
csi-driver
csi-driver-spiffe
Ctrl
DCO
DHCP
DNS01
DNS-01
DNSPod
DNSimple
DaemonSet
DataDog
Datree
Dean-Coakley
DigitalOcean
OVHCloud
Distroless
DoesNotExist
DuckDuckGo
etcd
EC2
enj
ECDSA
ejbca
EKS
ELB
Ed25519
Encrypter
Fargate
FastDNS
FreeIPA
fs-group
GatewayAPI
GCE
GCLB
GCP
Git-Jiro
GKE
GitOps
github-actions
gRPC
GSoC
Gloo
GoDaddy
GoLand
HAProxy
HTTP-01
HTTP01
HTTPRoute
HashiCorp
Helmfile
IAM
IdP
INWX
IPs
IPv6
IssuerRef
Istio
IstioOperator
istiod
Intel
intra
JSON
Jetstack
JetstackHQ
JoshVanL
Jsonnet
Juneezee
JoooostB
Keyfactor
KeySelector
KeyUsage
KUARD
Kirill-Garbar
Knative
Krew
kuard
k8s
KubeCon
Kubernetes
Openshift
Kyverno
Learnk8s
LuCI
Maartje
MacOS
Makefile
Makefiles
NameCheap
NGINX
NLB
NLBs
NotIn
Ocado
OmairK
OpenAPI
OpenFaaS
OpenShift
OpenWRT
OperatorHub
OperatorHub.io
PEM
PKCS12-formatted
PKCS#12
PKCS#8
Pomerium
PostgreSQL
PowerShell
Prometheus
P-521
RBAC
RDN
RDNs
RomanenkoDenys
Redis
RFC2136
RFC8555
RR
RRs
RSA
Ramlot
RinkiyaKeDad
Robusta
Route53
API_AssumeRoleWithWebIdentity
AssumeRoleWithWebIdentity
Runtime
roadmap
SGX
SOA
SecretTemplate
secretTemplate
ServerSideApply
SelfSigned
SgtCoDFish
Slowloris
Smallstep
SubjectAccessReview
literalSubject
LiteralSubject
LiteralSubjects
SVIDs
stevehipwell
TLDs
TODO
TPP
TSIG
TSIGs
TXT
Tiller
Traefik
URIs
Uncategorized
Uncomment
VPC
VaaS
Velero
Venafi
versioned
WebhookConfiguration
ControllerConfiguration
WIP
YAML
YAMLs
accessors
acme-dns
ad-hoc
add-ons
allowlist
alrs
analyse
andreas-p
andrewmwhite
annerajb
anton-johansson
apiGroup
apiserver
artificial-aidan
aws-pca-issuer
aws-privateca-issuer
awskms-issuer
awspca
backend
backends
backoff
backport
backported
base64
bazel
benlangfeld
boolean
cainjector
cert-manager-dev
checksum
clatour
cmctl
cmrel
codebase
coderanger
config
containerd
customizable
defaultCAPackageVersion
distroless
e.g.
e2e
eTLD
eddiehoffman
edglynes
enablement
erikgb
errored
erroring
ExternalDNS
external-dns
finalizer
finalizers
foosinn
francescsanjuanmrf
freeipa-issuer
gatewayhttproute-labels
gatewayhttproute-service-type
gcloud
goimports
google-cas-issuer
goroutine
gosec
hardcodes
hardcoded
healthz
honour
hostname
hostAliases
https
homebrew
Homebrew
i.e.
ingress-gce
ingress-nginx
ingressclass
injectable
inteon
io
irbekrm
issuances
istio-csr
istioctl
jakexks
jandersen-plaid
johanfleury
johejo
jonathansp
joshuastern
jq
jsoref
justinkillen
keystore
keystores
kit837
kms-issuer
kube-cert-manager
kube-ingress-aws-controller
kube-lego
kube-apiserver
kube-proxy
tcpdump
kubebuilder
kubectl
kubed
kubelet
kubeprod
kubernetes-replicator
kubernetes-supported-versions
labelled
lalitadithya
ldflag
lifecycle
liveness
loadbalancer
longkai
loopback
mTLS
multivalue
macOS
makefile
manual-rotation-private-key
matchExpressions
mechanism
metadata
metadata.generation
middleware
migrate-api-version
misconfiguration
misconfigured
mixin
mixins
mozz-lx
munnerz
nameserver
nameservers
namespace
namespaced
namespaces
ndegory
oauth2
OAuth
observedGeneration
onwards
openshift-supported-versions
plaintext
powershell
pre
preemptible
pre-release
pre-released
pre-releases
prepended
prioritise
propagations
publicised
reStructuredText
reachability
rebase
reissuance
reflector
remediate
renewBefore
repo
retryable
retweets
routable
runtime
runtimes
signoff
sigstore
status.condition
stdout
subchart
subcommand
subcommands
subdomain
subdomains
subfolders
submodule
submodules
subresource
symlink
tamalsaha
tcs-issuer
teejaded
templated
templating
tmpfs
thiscantbeserious
tolerations
tomasfreund
treydock
ulrichgi
uncomment
unencrypted
uninstallation
unredacted
unschedule
untrusted
upstream
useDefaultCAs
userinfo
util
vhosakot
v0.5.0
v0.7.0
v0.7.0.
v0.16
v0.23.1
v1
v1.12
v1.12.1
v1.12.2
v1.12.3
v1.12.4
v1.13
v1.16
v1.19
v1.5
v1.5.0
v1.5.0.
v1.5.1
v1.5.1.
v1.5.2
v1.5.3
v1.5.4
v1.5.4.
v1.5.5
v1.6
v1.6.0
v1.6.1
v1.6.2
v1.6.3
v1.7
v1.7.0
v1.7.1
v1.7.2
v1.7.3
v1.8
v1.8.
v1.8.0
v1.8.1
v1.8.2
v1.9.0
v1.9.1
v1.10
v1.11
v1.11.0
v1.11.1
v1.11.2
v1.11.3
v1.11.4
v1.11.5
v1.12.0
v1.12.1.
v1.12.2.
v1.12.3.
v1.15.0.
v1alpha1
v1alpha2
v1alpha3
v1beta1
v2
v3
VCert
vendoring
vendored
versioning
wallrj
webhook
webhooks
whitelist
whitespace
wildcard
wildcards
wpjunior
yann-soubeyrand
yk
mfmbarros
maelvls
bitscuit
zsh
PodDisruptionBudget
PodSecurityPolicy
ClusterIP
NodePort
NodeSelector
pprof
GSoD
GSoC
ncm-issuer
Nokia
Netguard
ZeroSSL
Sectigo
subchart
subcharts
testgrid
cert-manager-jetstack-cert-manager-next
PromQL
DynamicSource
AcidLeroy
oGi4i
spockz
andrewgkew
sveba
rodrigorfk
craigminihan
hawksight
lucacome
iptables
Wireshark
microVM
microVMs
MutatingWebhookConfiguration
ValidatingWebhookConfiguration
OVHcloud
ProwJobs
configs
dkulchinsky
trivy
caBundleSecretRef
caBundle
Tolsto
StableCertificateRequestName
sathyanarays
thib-mary
securityContext
joebowbeer
InvalidRequest
james-callahan
ServiceMonitor
sathieu
NetworkPolicy
mjudeikis
rgl
1password
VCert
v1.11.0
v1.11.1
v4.4.1
secretless
TokenRequest
v1.12.0
v1.12.0.
PodDisruptionBudgets
andrewsomething
avi-08
e96wic
ExNG
g-gaston
jkroepke
malovme
maumontesilva
tobotg
TrilokGeer
waterfoul
yulng
vidarno
vinzent
dsonck92
go.work
go.mod
validatingwebhookconfigurations
mutatingwebhookconfigurations
customresourcedefinitions
unlabelled
v1.27.1
v0.6.0.
v4.4.1
v1.13.0
v1.13.0.
v1.13.1
v1.13.2
v1.13.3
v1.13.4
v1.13.
v1.12.5
v1.12.6
v1.12.7
v1.12.8
v1.14.0
v1.14.x
v1.14.3
v1.14.3.
liveness
apiservices
arm64
IaC
Kyverno
Stakater
Reloader
reloader
yq
usr
ssl
cert.pem
Rollout
rollout
JKS-formatted
changeit
ctl
PrivateCA
structs
klog
relabelings
kustomize
TokenReview
JWTs
TTLs

FlorianLiebhart
cypres
ubergesundheit
gdvalle
rouke-broersma
schrodit
zhangzhiqiangcs
arukiidou
Richardds
kahirokunn
selfsigned-issuer
apiVersion
gateway.networking.k8s.io
networking.k8s.io
certificates.k8s.io

venafi-enhanced-issuer
venafi-issuer
adcs-issuer
cview-issuer
cfssl-issuer
GlobalSign

# TEMPORARY
# these are temporarily ignored because the spellchecker
# has difficulty detecting that they're in comments or links
# and thus shouldn't be checked

ingress.md
README.md
certificate.md
pageinfo
md#renew

# END TEMPORARY

# As per https://tools.ietf.org/html/rfc5280, the spelling "X.509" is the
# correct spelling. The spelling "x509" and "X509" are incorrect.

X.509

# Announcements

Logics
OpenSSF
OSS-Fuzz
Korczynski