pkg/cvo/metrics: Fix nil handling

Author: DavidHurta

pkg/cvo/metrics.go

@@ -222,6 +222,7 @@ func RunMetrics(runContext context.Context, shutdownContext context.Context, lis
 	// Start the serving cert controller to begin watching the cert and key files
 	go servingContentController.Run(runContext, 1)
 
+	var clientCA dynamiccertificates.CAContentProvider
 	var clientCAController *dynamiccertificates.ConfigMapCAController
 	if !metricsOptions.DisableAuthentication {
 		// Create a dynamic CA controller to watch for client CA changes from a ConfigMap.
@@ -246,6 +247,9 @@ func RunMetrics(runContext context.Context, shutdownContext context.Context, lis
 
 		// Start the client CA controller to begin watching the ConfigMap
 		go clientCAController.Run(runContext, 1)
+
+		// Assign to interface variable to ensure proper nil handling
+		clientCA = clientCAController
 	}
 
 	// Determine client authentication mode once and reuse it for both base and listener configs
@@ -257,7 +261,7 @@ func RunMetrics(runContext context.Context, shutdownContext context.Context, lis
 	baseTlSConfig := crypto.SecureTLSConfig(&tls.Config{ClientAuth: clientAuth})
 	servingCertController := dynamiccertificates.NewDynamicServingCertificateController(
 		baseTlSConfig,
-		clientCAController,
+		clientCA,
 		servingContentController,
 		nil,
 		nil,