GCDS failing to remove OUs from G Suite Domain

[Wilderbeest]

We have started to see GCDS failing as it's trying to remove OUs from the G Suite domain. For example, if the AD OU is removed, the G Suite OU would normally have been removed automatically in the past, but we are getting this error in the logs:

 

 

[2020-09-03 14:49:16,792+0100] [swingWorker-pool-2-thread-6] [ERROR] [plugin.google.ApiaryRetryPolicy] Retry attempts exhausted for Deleting orgunit uk/sch/herts/xxxxx/School/Users/TEST, with attempt # 0

[2020-09-03 14:49:16,792+0100] [swingWorker-pool-2-thread-6] [ERROR] [plugin.google.ApiaryRetryPolicy] Last encountered exception: com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad Request

{

"code" : 400,

"errors" : [ {

"domain" : "global",

"message" : "Invalid Customer Id",

"reason" : "invalid"

} ], "message" : "Invalid Customer Id"

}

 

In this case, it's a test OU created in AD, which GCDS is happy to create in G Suite domain. Remove it in AD and GCDS can't sync that change.

Has anyone else noticed this behaviour? It seem to be affecting multiple sites and is a recent development. Any ideas?

Edited September 4, 2020 by Wilderbeest