Fix unit test flaky for IPsec controller

Wait one second before updating the CSR to mitigate the issue
that the CSR update event might be missed in WaitForCertificate().

Fixes: #3851

Signed-off-by: Xu Liu <[email protected]>

pkg/agent/controller/ipseccertificate/ipsec_certificate_controller_test.go

@@ -353,6 +353,11 @@ func signCSR(t *testing.T, controller *fakeController,
 	assert.Empty(t, remain)
 	req, err := x509.ParseCertificateRequest(block.Bytes)
 	assert.NoError(t, err)
+
+	// Wait one second as the fake clientset doesn't support watching with specific resourceVersion.
+	// The update event may be missed by the watcher used in csrutil.WaitForCertificate()
+	time.Sleep(1 * time.Second)
+
 	newCert := createCertificate(t, req.Subject.CommonName, controller.caCert,
 		controller.caKey, req.PublicKey, csr.CreationTimestamp.Time, expirationDuration)
 	toUpdate := csr.DeepCopy()
@@ -369,6 +374,7 @@ func signCSR(t *testing.T, controller *fakeController,
 	_, err = controller.kubeClient.CertificatesV1().CertificateSigningRequests().
 		UpdateStatus(context.TODO(), toUpdate, metav1.UpdateOptions{})
 	assert.NoError(t, err)
+	t.Logf("Sign CSR %q successfully", csr.Name)
 }
 
 func Test_jitteryDuration(t *testing.T) {