From a37b8080e92b538d216304ab0e0e1356ea0cc6c5 Mon Sep 17 00:00:00 2001
From: Alessio Greggi <alessio.greggi@suse.com>
Date: Fri, 18 Oct 2024 10:26:12 +0200
Subject: [PATCH] make `must_change_password` attribute immutable after
 creation (#1422)

Signed-off-by: Alessio Greggi <alessio.greggi@suse.com>
---
 rancher2/schema_user.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rancher2/schema_user.go b/rancher2/schema_user.go
index 944b9ebf..72d0558a 100644
--- a/rancher2/schema_user.go
+++ b/rancher2/schema_user.go
@@ -25,6 +25,7 @@ func userFields() map[string]*schema.Schema {
 		},
 		"must_change_password": {
 			Type:     schema.TypeBool,
+			ForceNew: true, // This makes the attribute immutable after creation
 			Optional: true,
 			Default:  false,
 		},