Add .tfstate.disablePlanLock

api/v1alpha2/terraform_types.go

@@ -511,6 +511,16 @@ type TFStateSpec struct {
 	// +optional
 	// +kubebuilder:default:string="0s"
 	LockTimeout metav1.Duration `json:"lockTimeout,omitempty"`
+
+	// DisablePlanLock is an option to disableb Terraform state lock for a plan action
+	//
+	// By default terraform will lock state but in case you want to avoid the default behaviour, 
+	// you need to set this vale to `true`
+	//
+	// Defaults to `false` which will lock Terraform state during the plan stage
+	// +optional
+
+	DisablePlanLock bool `json:"disablePlanLock,omitempty"`
 }
 
 type ForceUnlockEnum string

charts/tofu-controller/crds/crds.yaml

@@ -10440,6 +10440,11 @@ spec:
 
                       Defaults to `0s` which will behave as though `LockTimeout` was not set
                     type: string
+                  disablePlanLock:
+                    default: true
+                    description: |-
+                      Disables state locking for a plan action. If set to true Terraform plan will be running win -lock=false parameter
+                    type: boolean
                 type: object
               values:
                 description: |-

controllers/tf_controller_drift_detect.go

@@ -78,7 +78,11 @@ func (r *TerraformReconciler) detectDrift(ctx context.Context, terraform infrav1
 		planRequest.Out = ""
 		planRequest.Refresh = true
 	}
-
+	if terraform.Spec.TFState != nil {
+		if terraform.Spec.TFState.DisablePlanLock == true {
+			planRequest.DisablePlanLock = true
+		}
+	}
 	eventSent := false
 	planReply, err := runnerClient.Plan(ctx, planRequest)
 	if err != nil {
@@ -98,7 +102,7 @@ func (r *TerraformReconciler) detectDrift(ctx context.Context, terraform infrav1
 			r.event(ctx, terraform, revision, eventv1.EventSeverityError, msg, nil)
 		}
 
-		err = fmt.Errorf("error running Plan: %s", err)
+		err = fmt.Errorf("error running drift Plan: %s", err)
 		return infrav1.TerraformNotReady(
 			terraform,
 			revision,

controllers/tf_controller_plan.go

@@ -68,6 +68,9 @@ func (r *TerraformReconciler) plan(ctx context.Context, terraform infrav1.Terraf
 			log.Info(fmt.Sprintf("LockTimeout is set: %s", terraform.Spec.TFState.LockTimeout))
 			planRequest.LockTimeout = terraform.Spec.TFState.LockTimeout.Duration.String()
 		}
+		if terraform.Spec.TFState.DisablePlanLock == true {
+			planRequest.DisablePlanLock = true
+		}
 	}
 
 	planReply, err := runnerClient.Plan(ctx, planRequest)

docs/References/terraform.md

@@ -1347,6 +1347,16 @@ three seconds.</p>
 <p>Defaults to <code>0s</code> which will behave as though <code>LockTimeout</code> was not set</p>
 </td>
 </tr>
+<tr>
+<td>
+<code>disablePlanLock</code><br>
+<em>
+bool
+</em>
+</td>
+<td>
+</td>
+</tr>
 </tbody>
 </table>
 </div>

runner/runner.proto

@@ -149,6 +149,7 @@ message PlanRequest {
   repeated string targets = 5;
   string lockTimeout = 6;
   string sourceRefRootDir = 7;
+  bool disablePlanLock = 8;
 }
 
 message PlanReply {

runner/server_plan.go

@@ -15,7 +15,7 @@ import (
 	tfjson "github.com/hashicorp/terraform-json"
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"
-	"sigs.k8s.io/controller-runtime"
+	controllerruntime "sigs.k8s.io/controller-runtime"
 	ctrl "sigs.k8s.io/controller-runtime"
 )
 
@@ -127,6 +127,11 @@ func (r *TerraformRunnerServer) Plan(ctx context.Context, req *PlanRequest) (*Pl
 		planOpt = append(planOpt, tfexec.Destroy(req.Destroy))
 	}
 
+	if req.DisablePlanLock {
+		log.Info("Running plan with no lock")
+		planOpt = append(planOpt, tfexec.Lock(false))
+	}
+
 	if req.LockTimeout != "" {
 		planOpt = append(planOpt, tfexec.LockTimeout(req.LockTimeout))
 	}