IHAC where when updating the Proxy.spec.trustedCA with the new CM containing the new CAs, the file `/etc/pki/ca-trust/source/anchors/openshift-config-user-ca-bundle.crt` contains the new certs, but the file `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem` does not.

I was able to partially reproduce the issue, when you don't create a new CM, but update the previous one, I would see that both files do not contain the new CAs.
After creating new CM and patching the Proxy with the new name, it started to work.

However, for customer - it doesn't resolve the issue.

It seems like a bug as the  `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem` should contain the same certs from the Proxy.spec.trustedCA.

    

OpenShift Container Platform 4.16.30
    

- partially