Payload Regression

PR https://github.com/openshift/cloud-credential-operator/pull/976 is causing blocking job failures in the nightly amd64 payload.

Evidence

• Payload: 4.22.0-0.nightly-2026-03-08-004901
• Failing blocking jobs:
  • aws-ovn-serial-1of2
  • aws-ovn-serial-2of2
  • aws-ovn-techpreview-serial-1of3
  • aws-ovn-techpreview-serial-2of3
  • aws-ovn-techpreview-serial-3of3
  • overall-analysis-all (downstream)
• Originating payload: 4.22.0-0.nightly-2026-03-07-161029 (first rejected after last accepted 4.22.0-0.nightly-2026-03-07-091925)
• Test failure: [sig-instrumentation][Late] Platform Prometheus targets should not be accessible without auth
• Error: failed to ensure scraping target of pod openshift-cloud-credential-operator/cco-metrics requires auth: context deadline exceeded
• The PR removed kube-rbac-proxy from the CCO metrics endpoint and reimplemented RBAC via controller-runtime. The Prometheus auth conformance test detects that the CCO metrics endpoint no longer requires authentication properly.
• Revert PR: https://github.com/openshift/cloud-credential-operator/pull/982

Action

Revert PR https://github.com/openshift/cloud-credential-operator/pull/976 to restore payload acceptance.