@@ -85,6 +85,9 @@ func TestServiceAccountAuthorization(t *testing.T) {

 		t.Fatalf("could not add role to service account")

 	}

+	// Give the policy cache a second to catch it's breath

+	time.Sleep(time.Second)

+

 	// Make sure the service account now has access

 	// This tests authentication using the etcd-based token getter

 	passNS := &api.Namespace{ObjectMeta: api.ObjectMeta{Name: "test-pass"}}

@@ -167,6 +170,9 @@ func TestServiceAccountAuthorization(t *testing.T) {

 		t.Fatalf("could not add role to service account")

 	}

+	// Give the policy cache a second to catch it's breath

+	time.Sleep(time.Second)

+

 	// Make sure the service account now has access to cluster2

 	passNS2 := &api.Namespace{ObjectMeta: api.ObjectMeta{Name: "test-pass2"}}

 	if _, err := cluster2SAKubeClient.Namespaces().Create(passNS2); err != nil {