# Postgresql operator and ldap root ca

**URL:** https://forums.percona.com/t/postgresql-operator-and-ldap-root-ca/38099
**Category:** Percona Operator for PostgreSQL
**Tags:** percona, postgres, postgresql
**Created:** [May 26, 2025, 2:27pm UTC](https://forums.percona.com/t/postgresql-operator-and-ldap-root-ca/38099 "2025-05-26T14:27:20Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![feca](https://avatars.discourse-cdn.com/v4/letter/f/b487fb/32.png) [@feca](https://forums.percona.com/u/feca)
#### Post date: [May 26, 2025, 2:27pm UTC](https://forums.percona.com/t/postgresql-operator-and-ldap-root-ca/38099/1 "2025-05-26T14:27:20Z")

</div>

Hi all!

I try to use the postgres-operator version 2.6.0 with PerconaPGCluster kind.  
When I mount the LDAP root ca configmap to the /etc/postgres/ldap/ca.crt path of statefulset, the ldap login works.  
But hot can I configure the PerconaPGCluster to mount this configmap?

---

<div class="post-metadata">

### Author: ![Jan\_Wieremjewicz](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/jan_wieremjewicz/32/7324_2.png) [@Jan\_Wieremjewicz](https://forums.percona.com/u/Jan_Wieremjewicz)
#### Post date: [June 3, 2025, 2:53pm UTC](https://forums.percona.com/t/postgresql-operator-and-ldap-root-ca/38099/2 "2025-06-03T14:53:38Z")

</div>

Hi! I just want to let you know that the post has been seen and that it’s queued for investigation. We’ll get back to you as soon as we have investigate a potential solution.

---

<div class="post-metadata">

### Author: ![feca](https://avatars.discourse-cdn.com/v4/letter/f/b487fb/32.png) [@feca](https://forums.percona.com/u/feca)
#### Post date: [June 3, 2025, 3:02pm UTC](https://forums.percona.com/t/postgresql-operator-and-ldap-root-ca/38099/3 "2025-06-03T15:02:51Z")

</div>

I reported this issue to the gitlab: [ldap auth not working via ldaps in verison 2.6.0 · Issue #1162 · percona/percona-postgresql-operator · GitHub](https://github.com/percona/percona-postgresql-operator/issues/1162)  
In the meantime, I found a workaround: I created a secret with ldap ca cert and I mounted with kyverno policy to the pod.

---

<div class="post-metadata">

### Author: ![Ege\_Gunes](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ege_gunes/32/4595_2.png) [@Ege\_Gunes](https://forums.percona.com/u/Ege_Gunes)
#### Post date: [June 4, 2025, 3:35pm UTC](https://forums.percona.com/t/postgresql-operator-and-ldap-root-ca/38099/4 "2025-06-04T15:35:52Z")

</div>

Hi @feca, unfortunately there’s no way to add new volumes into statefulsets as of v2.6.0. I created [Jira](https://perconadev.atlassian.net/browse/K8SPG-789) to allow you to define new volumes.

You found a smart workaround which I hope won’t be necessary in the future.