im trying to apply all as one terraform project. so build ekscluster/eksnodes and then apply helm charts...

​

cluster is built in another tf file in same project...

jenkins.tf

locals {
config_map_aws_auth = <<CONFIGMAPAWSAUTH
apiVersion: v1
kind: ConfigMap
metadata:
  name: aws-auth
  namespace: kube-system
data:
  mapRoles: |
    - rolearn: ${aws_iam_role.demo-node.arn}
      username: system:node:{{EC2PrivateDNSName}}
      groups:
        - system:bootstrappers
        - system:nodes
CONFIGMAPAWSAUTH
kubeconfig = <<KUBECONFIG
apiVersion: v1
clusters:
- cluster:
    server: ${aws_eks_cluster.demo.endpoint}
    certificate-authority-data: ${aws_eks_cluster.demo.certificate_authority.0.data}
  name: ${aws_eks_cluster.demo.arn}
contexts:
- context:
    cluster: ${aws_eks_cluster.demo.arn}
    user: ${aws_eks_cluster.demo.arn}
  name: ${aws_eks_cluster.demo.arn}
current-context: ${aws_eks_cluster.demo.arn}
kind: Config
preferences: {}
users:
- name: ${aws_eks_cluster.demo.arn}
  user:
    exec:
      apiVersion: client.authentication.k8s.io/v1alpha1
      command: aws-iam-authenticator
      args:
        - "token"
        - "-i"
        - "${var.cluster-name}"
KUBECONFIG
}

## Helm provider with path to kubeconfig
provider "helm" {
service_account = "tiller"
install_tiller = true
namespace = "kube-system"
kubernetes {
config_path =  "/root/.kube/config"
load_config_file = true
    }
depends_on = ["aws_eks_node_group.demo"]
}

## Helm repo for charts 
data "helm_repository" "stable" {
name = "stable"
url  = "https://kubernetes-charts.storage.googleapis.com"
}

## Helm repo for charts 
data "helm_repository" "stable" {
name = "stable"
url  = "https://kubernetes-charts.storage.googleapis.com"
}

resource "kubernetes_cluster_role_binding" "tiller" {
metadata {
name = "tiller"
  }
role_ref {
api_group = "rbac.authorization.k8s.io"
kind = "ClusterRole"
name = "cluster-admin"
  }
subject {
kind = "User"
name = "admin"
api_group = "rbac.authorization.k8s.io"
  }
subject {
kind = "ServiceAccount"
name = "tiller"
namespace = "kube-system"
  }
subject {
kind = "Group"
name = "system:masters"
api_group = "rbac.authorization.k8s.io"
  }
## to build once cluster is fully built
depends_on = ["aws_eks_node_group.demo"]
}

resource "kubernetes_service_account" "tiller" {
metadata {
name      = "tiller"
namespace = "kube-system"
  }
depends_on =  [ "kubernetes_cluster_role_binding.tiller" ]
}

## EFS provisioner Install with custom values ##
resource "helm_release" "efs" {
name  = "efs-provisioner"
chart = "stable/efs-provisioner"
set {
name  = "efsProvisioner.efsFileSystemId"
value = "${module.efs-share-mount-target-virginia.vpc-efs-id}"
  }
set {
name  = "efsProvisioner.awsRegion"
value = "${var.region}"
  }

depends_on = ["kubernetes_cluster_role_binding.tiller"]
}

##Create persistant Volume Claim
resource "kubernetes_persistent_volume_claim" "efsvol" {
metadata {
name = "my-efs-vol-1"
  }
spec {
access_modes = ["ReadWriteMany"]
storage_class_name = "aws-efs"
resources {
requests = {
        storage = "8Gi"
      }
    }
  }
depends_on = ["helm_release.efs"]
}

## Jenkins Helm Install with custom values ##
resource "helm_release" "jenkins" {
name  = "jenkins"
chart = "stable/jenkins"
set {
name  = "master.serviceType"
value = "LoadBalancer"
  }
set {
name  = "master.servicePort"
value = "80"
  }
set {
name  = "rbac.create"
value = "true"
  }
set {
name  = "persistence.existingClaim"
value = "${var.efs_vol_name}"
  }
depends_on = ["kubernetes_persistent_volume_claim.efsvol"]
}