@yee379 @larsks

Did you ever get this working? We're having the same issue and I can't figure out what we're doing wrong. I even went so far as to create a custom CNPG image with our root CA baked into it. But it still refuses to work. The only solution we've found is to disable certificate checking via:

  env:
    - name: LDAPTLS_REQCERT
      value: never

I realize this is a security risk and the wrong way to solve this issue, but I'm exasperated about how to get it to work any other way.