Configuring SAML with Google groups LDAP self hosted in kubernetes

I'm trying to configure google saml with ldap groups. I can log in, but the ldap part is failing

194
[SAML] - Received SAML Login Response, parsing...
193
[SAML] - Validating response...
192
[SAML] - Validated response, and received the following attributes {
191
  email: 'austin@<myemail>.com',
190
  firstName: 'Austin',
189
  lastName: '<my name>'
188
}
187
[SAML] - Warning: field groups not found in attributes
186
[LDAP] - Error connecting LDAP client.  Error: self signed certificate
185
    at TLSSocket.onConnectSecure (node:_tls_wrap:1530:34)
184
    at TLSSocket.emit (node:events:526:28)
183
    at TLSSocket.emit (node:domain:475:12)
182
    at TLSSocket._finishInit (node:_tls_wrap:944:8)
181
    at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:725:12) {
180
  code: 'DEPTH_ZERO_SELF_SIGNED_CERT'
179
}

I've tried adding a self-signed certificate and adding it here:

  NODE_EXTRA_CA_CERTS: /certs/retool_selfsigned_cert.pem

but still get this error

Any guidance on how to configure google ldap to avoid this issue?