Merge pull request #3534 from kcp-ci-bot/cherry-pick-3533-to-release-0.28

[release-0.28] fix flakiness in TestAPIExportBindingAuthorizer

Author: kcp-ci-bot

test/e2e/virtual/apiexport/authorizer_test.go

@@ -631,7 +631,8 @@ func TestAPIExportBindingAuthorizer(t *testing.T) {
 
 	// Bind to second tenant workspace so url pops up. So we use this to check tenant1 access.
 	for _, shard := range shards.Items {
-		tenant2Path, _ := kcptesting.NewWorkspaceFixture(t, server, orgPath, kcptesting.WithName(shard.Name+"-tenant-2"))
+		tenant2Path, _ := kcptesting.NewWorkspaceFixture(t, server, orgPath, kcptesting.WithName(shard.Name+"-tenant-2"), kcptesting.WithShard(shard.Name))
+
 		kcptestinghelpers.Eventually(t, func() (bool, string) {
 			_, err = kcpClient.Cluster(tenant2Path).ApisV1alpha2().APIBindings().Create(ctx, apiBinding, metav1.CreateOptions{})
 			return err == nil, fmt.Sprintf("Error creating APIBinding: %v", err)