test: wait for IAM permission propagation in customer-managed CAS CA … (#13776) (#22513)

[upstream:a0080b0f13817f07e7fafcf511ed8274085fc232]

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

google/services/sql/resource_sql_database_instance_test.go

@@ -2921,7 +2921,10 @@ func TestAccSqlDatabaseInstance_useCustomSubjectAlternateName(t *testing.T) {
 	acctest.VcrTest(t, resource.TestCase{
 		PreCheck:                 func() { acctest.AccTestPreCheck(t) },
 		ProtoV5ProviderFactories: acctest.ProtoV5ProviderFactories(t),
-		CheckDestroy:             testAccSqlDatabaseInstanceDestroyProducer(t),
+		ExternalProviders: map[string]resource.ExternalProvider{
+			"time": {},
+		},
+		CheckDestroy: testAccSqlDatabaseInstanceDestroyProducer(t),
 
 		Steps: []resource.TestStep{
 			{
@@ -2955,7 +2958,10 @@ func TestAccSqlDatabaseInstance_useCustomerManagedServerCa(t *testing.T) {
 	acctest.VcrTest(t, resource.TestCase{
 		PreCheck:                 func() { acctest.AccTestPreCheck(t) },
 		ProtoV5ProviderFactories: acctest.ProtoV5ProviderFactories(t),
-		CheckDestroy:             testAccSqlDatabaseInstanceDestroyProducer(t),
+		ExternalProviders: map[string]resource.ExternalProvider{
+			"time": {},
+		},
+		CheckDestroy: testAccSqlDatabaseInstanceDestroyProducer(t),
 
 		Steps: []resource.TestStep{
 			{
@@ -3035,6 +3041,15 @@ resource "google_privateca_ca_pool_iam_member" "granting" {
   member = "serviceAccount:service-${data.google_project.project.number}@gcp-sa-cloud-sql.iam.gserviceaccount.com"
 }
 
+resource "time_sleep" "wait_2_mins" {
+  depends_on = [
+    google_privateca_certificate_authority.customer_ca,
+    google_privateca_ca_pool_iam_member.granting
+  ]
+
+  create_duration = "120s"
+}
+
 resource "google_sql_database_instance" "instance" {
   name                = "%{databaseName}"
   region              = "us-central1"
@@ -3050,10 +3065,7 @@ resource "google_sql_database_instance" "instance" {
 	}
   }
 
-  depends_on = [
-      google_privateca_certificate_authority.customer_ca,
-      google_privateca_ca_pool_iam_member.granting
-  ]
+  depends_on = [time_sleep.wait_2_mins]
 }
 `, context)
 }
@@ -3119,6 +3131,16 @@ resource "google_privateca_ca_pool_iam_member" "granting" {
   member = "serviceAccount:service-${data.google_project.project.number}@gcp-sa-cloud-sql.iam.gserviceaccount.com"
 }
 
+
+resource "time_sleep" "wait_2_mins" {
+  depends_on = [
+    google_privateca_certificate_authority.customer_ca,
+    google_privateca_ca_pool_iam_member.granting
+  ]
+
+  create_duration = "120s"
+}
+
 resource "google_sql_database_instance" "instance" {
   name                = "%{databaseName}"
   region              = "us-central1"
@@ -3133,10 +3155,7 @@ resource "google_sql_database_instance" "instance" {
 	}
   }
 
-  depends_on = [
-      google_privateca_certificate_authority.customer_ca,
-      google_privateca_ca_pool_iam_member.granting
-  ]
+  depends_on = [time_sleep.wait_2_mins]
 }
 `, context)
 }