{"id":"hcp-registry-ca-two-places","text":"Registry CA certificates for disconnected HCP must be configured in two places: the management cluster (`image.config.openshift.io` additionalTrustedCA) and the hosted cluster workers (`spec.additionalTrustBundle` referencing a `user-ca-bundle` ConfigMap)","truth_value":"IN","source":"entries/2026/03/05/en-documentation-openshift_container_platform-417-html-hosted_control_planes-dep.md","source_url":"","source_hash":"b192bc8940805702","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"hcp-registry-ca-two-places","truth_value":"IN","reason":"premise"}]}}