4 files changed, 87 insertions, 0 deletions
diff --git a/app/graphql/mutations/terraform/state/base.rb b/app/graphql/mutations/terraform/state/base.rb
new file mode 100644
index 00000000000..b1721c784b1
--- /dev/null
+++ b/app/graphql/mutations/terraform/state/base.rb
@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Mutations
+  module Terraform
+    module State
+      class Base < BaseMutation
+        authorize :admin_terraform_state
+
+        argument :id,
+                Types::GlobalIDType[::Terraform::State],
+                required: true,
+                description: 'Global ID of the Terraform state'
+
+        private
+
+        def find_object(id:)
+          GitlabSchema.find_by_gid(id)
+        end
+      end
+    end
+  end
+end
diff --git a/app/graphql/mutations/terraform/state/delete.rb b/app/graphql/mutations/terraform/state/delete.rb
new file mode 100644
index 00000000000..f08219cb395
--- /dev/null
+++ b/app/graphql/mutations/terraform/state/delete.rb
@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+module Mutations
+  module Terraform
+    module State
+      class Delete < Base
+        graphql_name 'TerraformStateDelete'
+
+        def resolve(id:)
+          state = authorized_find!(id: id)
+          state.destroy
+
+          { errors: errors_on_object(state) }
+        end
+      end
+    end
+  end
+end
diff --git a/app/graphql/mutations/terraform/state/lock.rb b/app/graphql/mutations/terraform/state/lock.rb
new file mode 100644
index 00000000000..d22c8de2560
--- /dev/null
+++ b/app/graphql/mutations/terraform/state/lock.rb
@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module Mutations
+  module Terraform
+    module State
+      class Lock < Base
+        graphql_name 'TerraformStateLock'
+
+        def resolve(id:)
+          state = authorized_find!(id: id)
+
+          if state.locked?
+            state.errors.add(:base, 'state is already locked')
+          else
+            state.update(lock_xid: lock_xid, locked_by_user: current_user, locked_at: Time.current)
+          end
+
+          { errors: errors_on_object(state) }
+        end
+
+        private
+
+        def lock_xid
+          SecureRandom.uuid
+        end
+      end
+    end
+  end
+end
diff --git a/app/graphql/mutations/terraform/state/unlock.rb b/app/graphql/mutations/terraform/state/unlock.rb
new file mode 100644
index 00000000000..0818dbd7fb3
--- /dev/null
+++ b/app/graphql/mutations/terraform/state/unlock.rb
@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+module Mutations
+  module Terraform
+    module State
+      class Unlock < Base
+        graphql_name 'TerraformStateUnlock'
+
+        def resolve(id:)
+          state = authorized_find!(id: id)
+          state.update(lock_xid: nil, locked_by_user: nil, locked_at: nil)
+
+          { errors: errors_on_object(state) }
+        end
+      end
+    end
+  end
+end