add (#4158)

Author: SevenEarth

.changelog/4158.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/tencentcloud_kubernetes_encryption_protection: support custom timeouts
+```

tencentcloud/services/tke/resource_tc_kubernetes_encryption_protection.go

@@ -5,6 +5,7 @@ import (
 	"fmt"
 	"time"
 
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
 	tke "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tke/v20180525"
 
 	tccommon "github.com/tencentcloudstack/terraform-provider-tencentcloud/tencentcloud/common"
@@ -30,7 +31,7 @@ func resourceTencentCloudKubernetesEncryptionProtectionCreatePostHandleResponse0
 	conf := tccommon.BuildStateChangeConf(
 		[]string{},
 		[]string{"Opened"},
-		5*tccommon.ReadRetryTimeout,
+		d.Timeout(schema.TimeoutCreate),
 		time.Second,
 		service.TkeEncryptionProtectionStateRefreshFunc(clusterId, []string{}),
 	)
@@ -55,7 +56,7 @@ func resourceTencentCloudKubernetesEncryptionProtectionDeletePostHandleResponse0
 	conf := tccommon.BuildStateChangeConf(
 		[]string{},
 		[]string{"Closed"},
-		5*tccommon.ReadRetryTimeout,
+		d.Timeout(schema.TimeoutDelete),
 		time.Second,
 		service.TkeEncryptionProtectionStateRefreshFunc(d.Id(), []string{}),
 	)

tencentcloud/services/tke/resource_tc_kubernetes_encryption_protection_extension.go

@@ -2849,15 +2849,24 @@ func (me *TkeService) TkeEncryptionProtectionStateRefreshFunc(clusterId string,
 			}
 		}()
 
-		object, err := me.client.UseTkeClient().DescribeEncryptionStatus(request)
+		var object *tke.DescribeEncryptionStatusResponse
+		err := resource.Retry(tccommon.ReadRetryTimeout, func() *resource.RetryError {
+			ratelimit.Check(request.GetAction())
+			result, e := me.client.UseTkeClient().DescribeEncryptionStatus(request)
+			if e != nil {
+				return tccommon.RetryError(e)
+			}
 
-		if err != nil {
-			return nil, "", err
-		}
+			if result == nil || result.Response == nil {
+				return resource.NonRetryableError(fmt.Errorf("Describe kubernetes encryption status failed, Response is nil."))
+			}
 
+			object = result
+			return nil
+		})
 		if err != nil {
 			errRet = err
-			return object, "", err
+			return nil, "", err
 		}
 
 		return object, helper.PString(object.Response.Status), nil
@@ -3204,9 +3213,21 @@ func (me *TkeService) DescribeKubernetesEncryptionProtectionById(ctx context.Con
 		}
 	}()
 
-	ratelimit.Check(request.GetAction())
+	var response *tke.DescribeEncryptionStatusResponse
+	err := resource.Retry(tccommon.ReadRetryTimeout, func() *resource.RetryError {
+		ratelimit.Check(request.GetAction())
+		result, e := me.client.UseTkeV20180525Client().DescribeEncryptionStatus(request)
+		if e != nil {
+			return tccommon.RetryError(e)
+		}
 
-	response, err := me.client.UseTkeV20180525Client().DescribeEncryptionStatus(request)
+		if result == nil || result.Response == nil {
+			return resource.NonRetryableError(fmt.Errorf("Describe kubernetes encryption status failed, Response is nil."))
+		}
+
+		response = result
+		return nil
+	})
 	if err != nil {
 		errRet = err
 		return

tencentcloud/services/tke/service_tencentcloud_tke.go

@@ -78,4 +78,10 @@ In addition to all arguments above, the following attributes are exported:
 * `id` - ID of the resource.
 * `status` - kms encryption status.
 
+## Timeouts
+
+The `timeouts` block allows you to specify [timeouts](https://developer.hashicorp.com/terraform/language/resources/syntax#operation-timeouts) for certain actions:
+
+* `create` - (Defaults to `30m`) Used when creating the resource.
+* `delete` - (Defaults to `30m`) Used when deleting the resource.