From d024641022381323c4db2261f83202c77142da5a Mon Sep 17 00:00:00 2001 From: David Soria Parra Date: Mon, 9 Mar 2026 10:24:14 +0000 Subject: [PATCH] fix: resolve GWS user creation timeout in Deploy workflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The hashicorp/googleworkspace provider has a known eventual-consistency bug (issue #387): after creating a user, it polls for 4 consecutive identical API etags before marking the resource created. Google's API frequently flip-flops etags, so the check never passes and the 300s default timeout trips — even though the user was actually created. This caused cliff@ creation to timeout, leaving the user in GWS but not in Pulumi state; subsequent runs fail with 409 Entity already exists. Two changes: - Mark cliff as existingGWSUser so Pulumi stops trying to create him (matches the pattern used for other stranded users). - Switch to the SamuZad/googleworkspace fork (v0.11.1), which lowers numConsistent from 4 to 2, preventing the timeout for future user creations. The upstream provider has been unmaintained for 2+ years. --- Pulumi.yaml | 3 ++- src/config/users.ts | 1 + 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/Pulumi.yaml b/Pulumi.yaml index 9c99e4f..eac338e 100644 --- a/Pulumi.yaml +++ b/Pulumi.yaml @@ -6,4 +6,5 @@ packages: source: terraform-provider version: 0.14.0 parameters: - - hashicorp/googleworkspace + - SamuZad/googleworkspace + - 0.11.1 diff --git a/src/config/users.ts b/src/config/users.ts index cbfd7aa..f22f24a 100644 --- a/src/config/users.ts +++ b/src/config/users.ts @@ -113,6 +113,7 @@ export const MEMBERS: readonly Member[] = [ firstName: 'Cliff', lastName: 'Hall', googleEmailPrefix: 'cliff', + existingGWSUser: true, memberOf: [ ROLE_IDS.COMMUNITY_MANAGERS, ROLE_IDS.MAINTAINERS,