aws-node iam annotation

aws-node.tf

resource "null_resource" "aws-node-iam" {
  provisioner "local-exec" {
    command = "aws eks --region ${var.region} update-kubeconfig --name ${var.cluster_name} && kubectl annotate sa aws-node -n kube-system eks.amazonaws.com/role-arn=${aws_iam_role.cni-role.arn}"
  }

  provisioner "local-exec" {
    when = "destroy"
    command = "aws eks --region ${var.region} update-kubeconfig --name ${var.cluster_name} && kubectl annotate sa aws-node -n kube-system eks.amazonaws.com/role-arn-"
  }
  
  depends_on = [
    "spotinst_ocean_aws.eks" # or eks cluster or autoscale group
  ]
}