CNO uses server-side apply for updating configmaps with  the `config.openshift.io/inject-trusted-cabundle` label.

In a corner case scenario where such configmap is created and then quickly removed it is possible that the update call from CNO will end up creating the configmap.

Originally discovered in: https://issues.redhat.com/browse/ROX-29622