Failing test(s): inTestAccPrivatecaCertificateAuthority_privatecaCertificateAuthorityCustomSkiExample

[SarahFrench]

Impacted tests

• TestAccPrivatecaCertificateAuthority_privatecaCertificateAuthorityCustomSkiExample

Affected Resource(s)

• google_privateca_certificate_authority

Failure rates

• 100% since test was created

Message(s)

------- Stdout: -------
=== RUN   TestAccPrivatecaCertificateAuthority_privatecaCertificateAuthorityCustomSkiExample
=== PAUSE TestAccPrivatecaCertificateAuthority_privatecaCertificateAuthorityCustomSkiExample
=== CONT  TestAccPrivatecaCertificateAuthority_privatecaCertificateAuthorityCustomSkiExample
    vcr_utils.go:152: Step 1/2 error: Error running apply: exit status 1
        Error: Error waiting to create CertificateAuthority: Error waiting for Creating CertificateAuthority: Error code 3, message: com.google.apps.framework.request.StatusException: <eye3 title=\\\'INVALID_ARGUMENT\\\'/> generic::INVALID_ARGUMENT: Exception calling IAM: Service account [email protected] does not exist.; IAM SetIamPolicy RPC failed on project_id: a2b7a77cafa293e0bp-tp.
          with google_privateca_certificate_authority.default,
          on terraform_plugin_test.tf line 2, in resource "google_privateca_certificate_authority" "default":
           2: resource "google_privateca_certificate_authority" "default" {
--- FAIL: TestAccPrivatecaCertificateAuthority_privatecaCertificateAuthorityCustomSkiExample (14.92s)
FAIL

Nightly build test history

• https://hashicorp.teamcity.com/test/7434210128381544319?currentProjectId=TerraformProviders_GoogleCloud_GOOGLE_NIGHTLYTESTS&expandTestHistoryChartSection=true

b/351842949

[SarahFrench]

We can force the service account to exist by using this:

resource "google_project_service_identity" "privateca_sa" {
  provider = google-beta
  service = "privateca.googleapis.com"
}

But when this is introduced to the test then a permissions error occurs instead. See GoogleCloudPlatform/magic-modules#11109 (comment)