importing images from a remote private mirror registry failed when both proxy cert and mirror registry cert are set in proxy configuration trustCA field:

spec:
  httpProxy: http://10.0.142.173:8080
  httpsProxy: https://10.0.142.173:8080
  trustedCA:
    name: custom-ca-bundle

always

    1. setup a remote private mirror registry     
    2. set up a cluster with a secure proxy, both proxy cert and mirror registry cert are set in proxy configuration trustCA field     
    3. import image 'oc import-image'

jiezhao-mac:hypershift jiezhao$ oc import-image ruby-hello-world:latest --from=ec2-18-220-45-148.us-east-2.compute.amazonaws.com:8443/openshift/ruby-hello-world --confirm
error: tag latest failed: Internal error occurred: ec2-18-220-45-148.us-east-2.compute.amazonaws.com:8443/openshift/ruby-hello-world:latest: Get "https://ec2-18-220-45-148.us-east-2.compute.amazonaws.com:8443/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority
imagestream.image.openshift.io/ruby-hello-world imported with errorsName:            ruby-hello-world
Namespace:        default
Created:        Less than a second ago
Labels:            <none>
Annotations:        openshift.io/image.dockerRepositoryCheck=2024-12-19T02:01:46Z
Image Repository:    image-registry.openshift-image-registry.svc:5000/default/ruby-hello-world
Image Lookup:        local=false
Unique Images:        0
Tags:            1latest
  tagged from ec2-18-220-45-148.us-east-2.compute.amazonaws.com:8443/openshift/ruby-hello-world  ! error: Import failed (InternalError): Internal error occurred: ec2-18-220-45-148.us-east-2.compute.amazonaws.com:8443/openshift/ruby-hello-world:latest: Get "https://ec2-18-220-45-148.us-east-2.compute.amazonaws.com:8443/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority
      Less than a second ago
error: imported completed with errors
jiezhao-mac:hypershift jiezhao$      

   it failed to import image

    importing image is successful

The issue is that the proxy ca bundle is not getting mounted on the openshift-apiserver pod.