Skip to content

The v1 docs follow nauthera-server's main branch and its 0.x releases on the way to 1.0, so fields and APIs can still change.

v1

ConfigMapKeyMissing

Docs version v1 (main)Nauthera is pre-1.0, in a design-partner program

The ConfigMap an LDAPDirectory names holds nothing under the key spec.caBundleRef names; the LDAPDirectory is Ready=False, Error, and nothing is sent.

Meaning

The ConfigMap exists and has no value, or an empty one, under spec.caBundleRef.key (ca.crt by default), in data or binaryData. The connection is not registered or updated until a value appears.

Impact

The organization's users cannot sign in with their directory password if the connection was never registered; an existing registration keeps its previous CA bundle.

Diagnosis

  1. kubectl -n <ns> describe ldapdirectory <name> names the ConfigMap and key.
  2. kubectl -n <ns> get configmap <configmap> -o jsonpath='{.data}' lists the keys it holds.

Mitigation

  • Add the bundle under the key, or point spec.caBundleRef.key at the key that holds it.

Escalation

The team that owns the directory supplies its CA certificate. Escalate only if the ConfigMap holds a value under the key and the condition stays.

Operator failure reasons · Generated from operator/internal/runbook/conditions.yaml in nauthera-server.