feat: add azapi locks to agent pool resources to prevent concurrent modifications (#160)

Author: matt-FFFFFF

main.default_agent_pool.tf

@@ -63,6 +63,9 @@ resource "azapi_update_resource" "default_agent_pool" {
   body = {
     properties = { for k, v in module.default_agent_pool_data.body_properties : k => v if v != null }
   }
+  locks = [
+    azapi_resource.this.id,
+  ]
   read_headers   = var.enable_telemetry ? { "User-Agent" : local.avm_azapi_header } : null
   update_headers = var.enable_telemetry ? { "User-Agent" : local.avm_azapi_header } : null
 }

modules/agentpool/main.tf

@@ -11,11 +11,14 @@ moved {
 resource "azapi_resource" "this" {
   count = var.output_data_only ? 0 : var.create_before_destroy ? 0 : 1
 
-  name                  = var.name
-  parent_id             = var.parent_id
-  type                  = "Microsoft.ContainerService/managedClusters/agentPools@2025-10-01"
-  body                  = local.resource_body
-  ignore_null_property  = true
+  name                 = var.name
+  parent_id            = var.parent_id
+  type                 = "Microsoft.ContainerService/managedClusters/agentPools@2025-10-01"
+  body                 = local.resource_body
+  ignore_null_property = true
+  locks = [
+    var.parent_id
+  ]
   replace_triggers_refs = local.replace_triggers_refs
   response_export_values = [
     "properties.currentOrchestratorVersion",
@@ -40,11 +43,14 @@ resource "azapi_resource" "this" {
 resource "azapi_resource" "this_create_before_destroy" {
   count = var.output_data_only ? 0 : var.create_before_destroy ? 1 : 0
 
-  name                  = "${var.name}${substr(sha256(uuid()), 0, 4)}"
-  parent_id             = var.parent_id
-  type                  = "Microsoft.ContainerService/managedClusters/agentPools@2025-10-01"
-  body                  = local.resource_body
-  ignore_null_property  = true
+  name                 = "${var.name}${substr(sha256(uuid()), 0, 4)}"
+  parent_id            = var.parent_id
+  type                 = "Microsoft.ContainerService/managedClusters/agentPools@2025-10-01"
+  body                 = local.resource_body
+  ignore_null_property = true
+  locks = [
+    var.parent_id
+  ]
   replace_triggers_refs = local.replace_triggers_refs
   response_export_values = [
     "properties.currentOrchestratorVersion",