Bug 1748633

Description of problem:
Creating a new app fails after installing a cluster with proxy enabled

Version-Release number of selected component (if applicable):
$ oc get clusterversion
NAME      VERSION                         AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.2.0-0.okd-2019-09-03-192548   True        False         123m    Error while reconciling 4.2.0-0.okd-2019-09-03-192548: the cluster operator openshift-samples is degraded

$ ./bin/openshift-install version
./bin/openshift-install unreleased-master-1680-g8c9abe40f7616303c03cafdc9ad612cd8fa7bd6b-dirty
built from commit 8c9abe40f7616303c03cafdc9ad612cd8fa7bd6b
release image registry.svc.ci.openshift.org/origin/release:4.2

How reproducible:
Always

Steps to Reproduce:
1. Create a cluster with proxy enabled
2. Create a new app:

$ oc new-app openshift/ruby~https://github.com/openshift/ruby-hello-world

Actual results:
W0903 16:00:27.402298   92336 dockerimagelookup.go:236] Docker registry lookup failed: Get https://registry-1.docker.io/v2/: x509: certificate signed by unknown authority
error: no tags found on matching image stream: "openshift/ruby"

The image stream "openshift/ruby" exists, but it has no tags.

  Use --allow-missing-imagestream-tags to use this image stream

Expected results:
Success

Additional info:
install-config
$ oc get cm/cluster-config-v1 -n kube-system -o yaml
apiVersion: v1
data:
  install-config: |
    additionalTrustBundle: |
      -----BEGIN CERTIFICATE-----
      <MY_PROXY_CA_CERTS>
      -----END CERTIFICATE-----
    apiVersion: v1
    baseDomain: devcluster.openshift.com
    compute:
    - hyperthreading: Enabled
      name: worker
      platform: {}
      replicas: 3
    controlPlane:
      hyperthreading: Enabled
      name: master
      platform:
        aws:
          rootVolume:
            iops: 0
            size: 120
            type: gp2
          type: m5.xlarge
          zones:
          - us-west-2a
          - us-west-2b
          - us-west-2c
          - us-west-2d
      replicas: 3
    metadata:
      creationTimestamp: null
      name: latest-proxy
    networking:
      clusterNetwork:
      - cidr: 10.128.0.0/14
        hostPrefix: 23
      machineCIDR: 10.0.0.0/16
      networkType: OpenShiftSDN
      serviceNetwork:
      - 172.30.0.0/16
    platform:
      aws:
        region: us-west-2
    proxy:
      httpProxy: http://<SNIP>
      httpsProxy: http://<SNIP>
    pullSecret: ""
    sshKey: <SNIP>
kind: ConfigMap

$ oc get proxy -o yaml
apiVersion: v1
items:
- apiVersion: config.openshift.io/v1
  kind: Proxy
  metadata:
    creationTimestamp: "2019-09-03T20:32:34Z"
    generation: 1
    name: cluster
    resourceVersion: "432"
    selfLink: /apis/config.openshift.io/v1/proxies/cluster
    uid: f6149e65-ce89-11e9-b324-024e6a40328c
  spec:
    httpProxy: http://<MY_PROXY>
    httpsProxy: http://<MY_PROXY>
    trustedCA:
      name: user-ca-bundle
  status:
    httpProxy: http://<MY_PROXY>
    httpsProxy: http://<MY_PROXY>
    noProxy: .cluster.local,.svc,.us-west-2.compute.internal,10.0.0.0/16,10.128.0.0/14,127.0.0.1,169.254.169.254,172.30.0.0/16,api-int.latest-proxy.devcluster.openshift.com,api.latest-proxy.devcluster.openshift.com,etcd-0.latest-proxy.devcluster.openshift.com,etcd-1.latest-proxy.devcluster.openshift.com,etcd-2.latest-proxy.devcluster.openshift.com,localhost
kind: List
metadata:
  resourceVersion: ""
  selfLink: ""