feat(user): add optional random password variable INPRO-1451

README.md

@@ -95,6 +95,7 @@ No resources.
 | <a name="input_group_settings"></a> [group\_settings](#input\_group\_settings) | contains all defined group setting templates for Google Groups | n/a | yes |
 | <a name="input_groups"></a> [groups](#input\_groups) | contains objects representing all defined Google Groups | n/a | yes |
 | <a name="input_users"></a> [users](#input\_users) | contains objects representing all defined Google Users | n/a | yes |
+| <a name="input_random_password"></a> [random\_password](#input\_random\_password) | contains a random password required for Users | `null` | no |
 | <a name="input_users_external"></a> [users\_external](#input\_users\_external) | contains objects representing all defined external Users | `{}` | no |
 
 ## Outputs

main.tf

@@ -51,7 +51,8 @@ module "users" {
   providers = {
     googleworkspace = googleworkspace
   }
-  user = each.value
+  user            = each.value
+  random_password = var.random_password
 }
 
 module "users_external_to_groups" {

modules/users/main.tf

@@ -17,6 +17,8 @@ resource "googleworkspace_user" "user" {
     family_name = var.user.family_name
     given_name  = var.user.given_name
   }
+  password = var.user.password != null ? var.user.password : var.random_password
+
   aliases                        = var.user.aliases
   archived                       = var.user.archived
   include_in_global_address_list = var.user.include_in_global_address_list
@@ -27,6 +29,7 @@ resource "googleworkspace_user" "user" {
 
   lifecycle {
     ignore_changes = [
+      password,
       recovery_email,
       recovery_phone,
     ]

modules/users/variables.tf

@@ -20,3 +20,9 @@ variable "user" {
     roles : optional(list(string)),
   })
 }
+
+variable "random_password" {
+  description = "contains a random password required for Users"
+  type        = string
+  default     = null
+}

variables.tf

@@ -59,6 +59,12 @@ variable "users" {
   }))
 }
 
+variable "random_password" {
+  description = "contains a random password required for Users"
+  type        = string
+  default     = null
+}
+
 variable "users_external" {
   description = "contains objects representing all defined external Users"
   type = map(object({