Is

ClusterRepo.Spec.CABundle

(

<http://catalog.cattle.io/v1|catalog.cattle.io/v1>

) intended to hold PEM (as the field name and CRD docstring suggest), or is it single-cert DER as the code actually treats it (

x509.ParseCertificate

in

pkg/catalogv2/http/client.go

) ? Seems a bit strange to call it a bundle if it only accepts DER...