From b863ab3c7a44573cd93a20a7ddc9aae8b2c098f9 Mon Sep 17 00:00:00 2001
From: "Max W. Portocarrero" <mportocarrero@ciandt.com>
Date: Tue, 20 Feb 2024 20:48:48 -0500
Subject: [PATCH] add depends_on to IAM policies

---
 .../container/resource_container_cluster_test.go.erb        | 2 ++
 .../container/resource_container_node_pool_test.go.erb      | 6 ++++++
 2 files changed, 8 insertions(+)

diff --git a/mmv1/third_party/terraform/services/container/resource_container_cluster_test.go.erb b/mmv1/third_party/terraform/services/container/resource_container_cluster_test.go.erb
index d29ab75db60b..a542384379f6 100644
--- a/mmv1/third_party/terraform/services/container/resource_container_cluster_test.go.erb
+++ b/mmv1/third_party/terraform/services/container/resource_container_cluster_test.go.erb
@@ -9620,6 +9620,8 @@ resource "google_project_iam_binding" "tagUser" {
     "serviceAccount:service-${data.google_project.project.number}@container-engine-robot.iam.gserviceaccount.com",
     "serviceAccount:${data.google_project.project.number}@cloudservices.gserviceaccount.com",
   ]
+
+  depends_on = [google_project_iam_binding.tagHoldAdmin]
 }
 
 resource "time_sleep" "wait_120_seconds" {
diff --git a/mmv1/third_party/terraform/services/container/resource_container_node_pool_test.go.erb b/mmv1/third_party/terraform/services/container/resource_container_node_pool_test.go.erb
index 51c349096390..42939e9b7e9b 100644
--- a/mmv1/third_party/terraform/services/container/resource_container_node_pool_test.go.erb
+++ b/mmv1/third_party/terraform/services/container/resource_container_node_pool_test.go.erb
@@ -4285,6 +4285,8 @@ resource "google_project_iam_binding" "tagUser" {
     "serviceAccount:service-${data.google_project.project.number}@container-engine-robot.iam.gserviceaccount.com",
     "serviceAccount:${data.google_project.project.number}@cloudservices.gserviceaccount.com",
   ]
+
+  depends_on = [google_project_iam_binding.tagHoldAdmin]
 }
 
 resource "time_sleep" "wait_120_seconds" {
@@ -4399,6 +4401,8 @@ resource "google_project_iam_binding" "tagUser" {
     "serviceAccount:service-${data.google_project.project.number}@container-engine-robot.iam.gserviceaccount.com",
     "serviceAccount:${data.google_project.project.number}@cloudservices.gserviceaccount.com",
   ]
+
+  depends_on = [google_project_iam_binding.tagHoldAdmin]
 }
 
 resource "time_sleep" "wait_120_seconds" {
@@ -4514,6 +4518,8 @@ resource "google_project_iam_binding" "tagUser" {
     "serviceAccount:service-${data.google_project.project.number}@container-engine-robot.iam.gserviceaccount.com",
     "serviceAccount:${data.google_project.project.number}@cloudservices.gserviceaccount.com",
   ]
+
+  depends_on = [google_project_iam_binding.tagHoldAdmin]
 }
 
 resource "time_sleep" "wait_120_seconds" {