Fix Datastream kms test failure (#7284) (#5263)

* Add desired state field to make sure PC is created in CREATED - b/260057913

* Revert virtual field

* Move the cmek key override to the correct example

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

.changelog/7284.txt

@@ -0,0 +1,3 @@
+```release-note:none
+
+```

google-beta/resource_datastream_stream_generated_test.go

@@ -189,6 +189,7 @@ func TestAccDatastreamStream_datastreamStreamFullExample(t *testing.T) {
 
 	context := map[string]interface{}{
 		"deletion_protection": false,
+		"stream_cmek":         BootstrapKMSKeyInLocation(t, "us-central1").CryptoKey.Name,
 		"random_suffix":       randString(t, 10),
 	}
 
@@ -312,7 +313,7 @@ resource "google_storage_bucket_iam_member" "reader" {
 }
 
 resource "google_kms_crypto_key_iam_member" "key_user" {
-    crypto_key_id = "tf-test-kms-name%{random_suffix}"
+    crypto_key_id = "%{stream_cmek}"
     role          = "roles/cloudkms.cryptoKeyEncrypterDecrypter"
     member        = "serviceAccount:service-${data.google_project.project.number}@gcp-sa-datastream.iam.gserviceaccount.com"
 }
@@ -409,7 +410,7 @@ resource "google_datastream_stream" "default" {
         }
     }
 
-    customer_managed_encryption_key = "tf-test-kms-name%{random_suffix}"
+    customer_managed_encryption_key = "%{stream_cmek}"
 }
 `, context)
 }