fix: ignore recoveryEmail and recoveryPhone on imported GWS users

These are user-managed fields that shouldn't be touched by IaC.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
David Soria Parra 2026-02-20 00:20:06 +00:00
commit f916271ed9

View file

@ -89,7 +89,7 @@ MEMBERS.forEach((member) => {
name: { familyName: member.lastName!, givenName: member.firstName! },
orgUnitPath: mcpOrgUnit.orgUnitPath,
},
{ import: primaryEmail, dependsOn: [mcpOrgUnit] }
{ import: primaryEmail, dependsOn: [mcpOrgUnit], ignoreChanges: ['recoveryEmail', 'recoveryPhone'] }
);
provisionedUsersByEmail[primaryEmail] = user;
} else {