# ConfigMapKeyMissing

The ConfigMap an LDAPDirectory names holds nothing under the key spec.caBundleRef names; the LDAPDirectory is Ready=False, Error, and nothing is sent.

## Meaning

The ConfigMap exists and has no value, or an empty one, under `spec.caBundleRef.key`
(`ca.crt` by default), in `data` or `binaryData`. The connection is not registered or
updated until a value appears.

## Impact

The organization's users cannot sign in with their directory password if the connection was
never registered; an existing registration keeps its previous CA bundle.

## Diagnosis

1. `kubectl -n <ns> describe ldapdirectory <name>` names the ConfigMap and key.
2. `kubectl -n <ns> get configmap <configmap> -o jsonpath='{.data}'` lists the keys it holds.

## Mitigation

- Add the bundle under the key, or point `spec.caBundleRef.key` at the key that holds it.

## Escalation

The team that owns the directory supplies its CA certificate. Escalate only if the ConfigMap
holds a value under the key and the condition stays.

---

[Operator failure reasons](https://www.nauthera.io/docs/v1/runbooks/operator) · Generated from [`operator/internal/runbook/conditions.yaml`](https://github.com/nauthera/nauthera-server/blob/main/operator/internal/runbook/conditions.yaml) in nauthera-server.