Configuring LDAP secure connection

[gstefanoff]

There are missing steps in ldap-auth for configuring secure connection to LDAP server.

I have placed required client certificates to /harbor/common/config/shared/trusted-certificates/ once harbor is restarted, the certificate disappears as mentioned here => #15216
I tried placing certificates in /etc/openldap/certs/ which did not work either.

Where do LDAP certificates need to be placed to secure the LDAP connection?
Please update documentation.

Thanks!

[stonezdj]

You can inject a custom cert with this config in harbor.yml
https://github.com/goharbor/harbor/blob/main/make/harbor.yml.tmpl#L73

storage_service:
   ca_bundle: <the path to the ldap cert file>