Problem statement

Gateway controllers do not watching Secrets referenced by spec.listeners.tls.certificateRef.

There are 2 places where these Secrets contents are checked:

• here in KIC Gateway controller, this does check the contents of the secret if the cert inside is valid. That should be triggered every time the Secret changes to verify the certificate validity and thus update Gateway conditions.
• here in KO Gateway controller, same as above

Without the watch ( as it's done currently), changed Secrets do not trigger Gateway reconciliation so users do not get e.g. Gateway's status conditions updated immediately

Acceptance criteria

• Gateway controllers watch changes on Secrets referenced by spec.listeners.tls.certificateRef