validate the presence of specified cluster or clusterisssuer in tlspo…

…licy

pkg/controllers/tlspolicy/tlspolicy_controller.go

@@ -19,6 +19,7 @@ package tlspolicy
 import (
 	"context"
 	"fmt"
+	v1 "github.com/jetstack/cert-manager/pkg/apis/certmanager/v1"
 
 	"github.com/go-logr/logr"
 
@@ -151,6 +152,24 @@ func (r *TLSPolicyReconciler) reconcileResources(ctx context.Context, tlsPolicy
 		return err
 	}
 
+	// validate that the issuer specified exists
+	issuerName := tlsPolicy.Spec.IssuerRef.Name
+	issuerKind := tlsPolicy.Spec.IssuerRef.Kind
+	if issuerKind == v1.ClusterIssuerKind {
+		issuer := &v1.ClusterIssuer{}
+		err = r.Client().Get(ctx, client.ObjectKey{Name: issuerName}, issuer)
+		if err != nil {
+			return err
+		}
+	}
+	if issuerKind == v1.IssuerKind {
+		issuer := &v1.Issuer{}
+		err = r.Client().Get(ctx, client.ObjectKey{Name: issuerName, Namespace: tlsPolicy.Namespace}, issuer)
+		if err != nil {
+			return err
+		}
+	}
+
 	// reconcile based on gateway diffs
 	gatewayDiffObj, err := r.ComputeGatewayDiffs(ctx, tlsPolicy, targetNetworkObject, &TLSPolicyRefsConfig{})
 	if err != nil {