admission webhook denied GoogleCASIssuer must be one of Issuer or ClusterIssuer

[matt-pave]

Error:
cert-manager/ingress-shim "msg"="re-queuing item due to error processing" "error"="admission webhook \"webhook.cert-manager.io\" denied the request: spec.issuerRef.kind: Invalid value: \"GoogleCASIssuer\": must be one of Issuer or ClusterIssuer" "key"="retool/retool-tp"

Logs on the cert-manager controller showing the above error.

kubectl get pods -n cert-manager 
NAME                                              READY   STATUS    RESTARTS   AGE
cert-manager-google-cas-issuer-86667d76f6-fnvkw   1/1     Running   0          55m
cert-manager-tp-5d64fc9cdb-h9xdp                  1/1     Running   0          55m
cert-manager-tp-cainjector-5658d56947-2s2bc       1/1     Running   0          55m
cert-manager-tp-webhook-997d66d67-rlsfj           1/1     Running   0          55m

Problem: GoogleCASIssuer should be able to be approved
Expected behaviour: request approved

[aceresia-posh]

For anyone looking at this, you need to set the group and kind in the issuerRef

issuerRef:
  name: issuer-name
  group: cas-issuer.jetstack.io
  kind: GoogleCASClusterIssuer