Error with helm provider using TLS

Trying to get the helm provider working with TLS. I have a tiller that was deployed outside of terraform, and it works fine if I run the helm client manually via:

helm ls --tls --tls-verify -a
helm version --tls --tls-verify

However, if I run a terraform plan with these provider options, it fails with a cryptic error:

provider "helm" {
  enable_tls = "true"
  insecure = "false"
  home = "$HOME/.helm"
  client_key = "$HOME/.helm/key.pem"
  client_certificate = "$HOME/.helm/cert.pem"
  ca_certificate = "$HOME/.helm/ca.pem"
  debug = "true"
}

Error is:

2019/06/26 16:28:20 [TRACE] <root>: eval: terraform.EvalNoop
2019/06/26 16:28:20 [TRACE] <root>: eval: terraform.EvalNoop
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalOpFilter
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalSequence
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalGetProvider
2019-06-26T16:28:20.313-0400 [INFO]  plugin: configuring client automatic mTLS
2019-06-26T16:28:20.348-0400 [DEBUG] plugin: starting plugin: path=/Users/jharlow/git/maas360-docker/terraform-relay-iks/.terraform/plugins/darwin_amd64/terraform-provider-kubernetes_v1.7.0_x4 args=[/Users/jharlow/git/maas360-docker/terraform-relay-iks/.terraform/plugins/darwin_amd64/terraform-provider-kubernetes_v1.7.0_x4]
2019-06-26T16:28:20.356-0400 [DEBUG] plugin: plugin started: path=/Users/jharlow/git/maas360-docker/terraform-relay-iks/.terraform/plugins/darwin_amd64/terraform-provider-kubernetes_v1.7.0_x4 pid=77227
2019-06-26T16:28:20.357-0400 [DEBUG] plugin: waiting for RPC address: path=/Users/jharlow/git/maas360-docker/terraform-relay-iks/.terraform/plugins/darwin_amd64/terraform-provider-kubernetes_v1.7.0_x4
2019-06-26T16:28:20.374-0400 [INFO]  plugin.terraform-provider-kubernetes_v1.7.0_x4: configuring server automatic mTLS: timestamp=2019-06-26T16:28:20.374-0400
2019-06-26T16:28:20.400-0400 [DEBUG] plugin.terraform-provider-kubernetes_v1.7.0_x4: plugin address: address=/var/folders/sl/31y9v2dx6lg2364pd91jdw1c0000gp/T/plugin300017758 network=unix timestamp=2019-06-26T16:28:20.400-0400
2019-06-26T16:28:20.400-0400 [DEBUG] plugin: using plugin: version=5
2019/06/26 16:28:20 [TRACE] BuiltinEvalContext: Initialized "kubernetes" provider for provider.kubernetes
2019/06/26 16:28:20 [TRACE] <root>: eval: terraform.EvalNoop
2019/06/26 16:28:20 [TRACE] <root>: eval: terraform.EvalNoop
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalOpFilter
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalOpFilter
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalSequence
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalSequence
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalConfigProvider
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalGetProvider
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalOpFilter
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalSequence
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalConfigProvider
2019/06/26 16:28:20 [TRACE] buildProviderConfig for provider.helm: using explicit config only
2019/06/26 16:28:20 [TRACE] GRPCProvider: GetSchema
2019/06/26 16:28:20 [TRACE] buildProviderConfig for provider.kubernetes: using explicit config only
2019/06/26 16:28:20 [TRACE] GRPCProvider: GetSchema
2019/06/26 16:28:20 [TRACE] GRPCProvider: Configure
2019-06-26T16:28:20.402-0400 [DEBUG] plugin.terraform-provider-helm_v0.10.0_x4: 2019/06/26 16:28:20 [DEBUG] TLS settings: Attempting to read contents of client_key from $HOME/.helm/key.pem
2019-06-26T16:28:20.402-0400 [DEBUG] plugin.terraform-provider-helm_v0.10.0_x4: 2019/06/26 16:28:20 [DEBUG] TLS settings: Attempting to read contents of client_certificate from $HOME/.helm/cert.pem
2019/06/26 16:28:20 [TRACE] [walkRefresh] Exiting eval tree: provider.helm
2019/06/26 16:28:20 [TRACE] vertex "provider.helm": visit complete
2019/06/26 16:28:20 [TRACE] dag/walk: visiting "data.helm_repository.weaveworks"
2019/06/26 16:28:20 [TRACE] vertex "data.helm_repository.weaveworks": starting visit (*terraform.NodeRefreshableDataResource)
2019/06/26 16:28:20 [TRACE] vertex "data.helm_repository.weaveworks": expanding dynamic subgraph
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.ResourceCountTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.ResourceCountTransformer with new graph:
data.helm_repository.weaveworks - *terraform.NodeRefreshableDataResourceInstance
------
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.OrphanResourceCountTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.OrphanResourceCountTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.AttachStateTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.AttachStateTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.TargetsTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.TargetsTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.ReferenceTransformer
2019/06/26 16:28:20 [DEBUG] ReferenceTransformer: "data.helm_repository.weaveworks" references: []
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.ReferenceTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.RootTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.RootTransformer (no changes)
2019/06/26 16:28:20 [TRACE] vertex "data.helm_repository.weaveworks": entering dynamic subgraph
2019/06/26 16:28:20 [TRACE] dag/walk: updating graph
2019/06/26 16:28:20 [TRACE] dag/walk: added new vertex: "data.helm_repository.weaveworks"
2019/06/26 16:28:20 [TRACE] dag/walk: visiting "data.helm_repository.weaveworks"
2019/06/26 16:28:20 [TRACE] vertex "data.helm_repository.weaveworks": starting visit (*terraform.NodeRefreshableDataResourceInstance)
2019/06/26 16:28:20 [TRACE] vertex "data.helm_repository.weaveworks": evaluating
2019/06/26 16:28:20 [TRACE] [walkRefresh] Entering eval tree: data.helm_repository.weaveworks
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalSequence
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalGetProvider
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalWriteState
2019/06/26 16:28:20 [TRACE] EvalWriteState: removing state object for data.helm_repository.weaveworks
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalIf
2019/06/26 16:28:20 [TRACE] <root>: eval: terraform.EvalNoop
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalReadData
2019/06/26 16:28:20 [TRACE] EvalReadData: working on data.helm_repository.weaveworks
2019/06/26 16:28:20 [TRACE] Re-validating config for data.helm_repository.weaveworks
2019/06/26 16:28:20 [TRACE] GRPCProvider: ValidateDataSourceConfig
2019/06/26 16:28:20 [TRACE] EvalReadData: data.helm_repository.weaveworks configuration is complete, so reading from provider
2019/06/26 16:28:20 [TRACE] GRPCProvider: ReadDataSource
data.helm_repository.weaveworks: Refreshing state...
2019/06/26 16:28:20 [TRACE] GRPCProvider: Configure
2019-06-26T16:28:20.470-0400 [DEBUG] plugin.terraform-provider-kubernetes_v1.7.0_x4: 2019/06/26 16:28:20 [INFO] Successfully loaded config file (/Users/jharlow/.bluemix/plugins/container-service/clusters/meg_dev_dal/kube-config-dal13-meg_dev_dal.yml; default context)
2019/06/26 16:28:20 [TRACE] [walkRefresh] Exiting eval tree: provider.kubernetes
2019/06/26 16:28:20 [TRACE] vertex "provider.kubernetes": visit complete
2019/06/26 16:28:20 [TRACE] dag/walk: visiting "kubernetes_service_account.tiller_service_account"
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_service_account.tiller_service_account": starting visit (*terraform.NodeRefreshableManagedResourceInstance)
2019/06/26 16:28:20 [TRACE] dag/walk: visiting "kubernetes_namespace.influx-flux"
2019/06/26 16:28:20 [TRACE] NodeRefreshableManagedResourceInstance: kubernetes_service_account.tiller_service_account will be refreshed
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_namespace.influx-flux": starting visit (*terraform.NodeRefreshableManagedResource)
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_service_account.tiller_service_account": evaluating
2019/06/26 16:28:20 [TRACE] [walkRefresh] Entering eval tree: kubernetes_service_account.tiller_service_account
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalSequence
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_namespace.influx-flux": expanding dynamic subgraph
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.ResourceCountTransformer
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalGetProvider
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.ResourceCountTransformer with new graph:
kubernetes_namespace.influx-flux - *terraform.NodeRefreshableManagedResourceInstance
------
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalReadState
2019/06/26 16:28:20 [TRACE] EvalReadState: reading state for kubernetes_service_account.tiller_service_account
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.OrphanResourceCountTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.OrphanResourceCountTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.AttachStateTransformer
2019/06/26 16:28:20 [DEBUG] Resource state not found for node "kubernetes_namespace.influx-flux", instance kubernetes_namespace.influx-flux
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.AttachStateTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.TargetsTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.TargetsTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.ReferenceTransformer
2019/06/26 16:28:20 [DEBUG] ReferenceTransformer: "kubernetes_namespace.influx-flux" references: []
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.ReferenceTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.RootTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.RootTransformer (no changes)
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_namespace.influx-flux": entering dynamic subgraph
2019/06/26 16:28:20 [TRACE] dag/walk: updating graph
2019/06/26 16:28:20 [TRACE] dag/walk: added new vertex: "kubernetes_namespace.influx-flux"
2019/06/26 16:28:20 [TRACE] UpgradeResourceState: schema version of kubernetes_service_account.tiller_service_account is still 0; calling provider "kubernetes" for any other minor fixups
2019/06/26 16:28:20 [TRACE] GRPCProvider: UpgradeResourceState
2019/06/26 16:28:20 [TRACE] dag/walk: visiting "kubernetes_namespace.influx-flux"
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_namespace.influx-flux": starting visit (*terraform.NodeRefreshableManagedResourceInstance)
2019/06/26 16:28:20 [TRACE] NodeRefreshableManagedResourceInstance: kubernetes_namespace.influx-flux has no existing state to refresh
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_namespace.influx-flux": evaluating
2019/06/26 16:28:20 [TRACE] [walkRefresh] Entering eval tree: kubernetes_namespace.influx-flux
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalSequence
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalGetProvider
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalReadState
2019/06/26 16:28:20 [TRACE] EvalReadState: reading state for kubernetes_namespace.influx-flux
2019/06/26 16:28:20 [TRACE] EvalReadState: no state present for kubernetes_namespace.influx-flux
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalDiff
2019/06/26 16:28:20 [TRACE] Re-validating config for "kubernetes_namespace.influx-flux"
2019/06/26 16:28:20 [TRACE] GRPCProvider: ValidateResourceTypeConfig
2019/06/26 16:28:20 [TRACE] GRPCProvider: PlanResourceChange
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalRefresh
2019/06/26 16:28:20 [TRACE] GRPCProvider: ReadResource
kubernetes_service_account.tiller_service_account: Refreshing state... [id=kube-system/tiller]
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalWriteState
2019/06/26 16:28:20 [TRACE] EvalWriteState: writing current state object for kubernetes_namespace.influx-flux
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalWriteDiff
2019/06/26 16:28:20 [TRACE] EvalWriteDiff: recorded Create change for kubernetes_namespace.influx-flux
2019/06/26 16:28:20 [TRACE] [walkRefresh] Exiting eval tree: kubernetes_namespace.influx-flux
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_namespace.influx-flux": visit complete
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_namespace.influx-flux": dynamic subgraph completed successfully
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_namespace.influx-flux": visit complete
2019-06-26T16:28:20.474-0400 [DEBUG] plugin.terraform-provider-kubernetes_v1.7.0_x4: 2019/06/26 16:28:20 [INFO] Checking service account tiller
2019-06-26T16:28:20.682-0400 [DEBUG] plugin.terraform-provider-helm_v0.10.0_x4: 2019/06/26 16:28:20 [DEBUG] "weaveworks" has been added to your repositories
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalIf
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalSequence
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalWriteState
2019/06/26 16:28:20 [TRACE] EvalWriteState: writing current state object for data.helm_repository.weaveworks
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalUpdateStateHook
2019/06/26 16:28:20 [TRACE] [walkRefresh] Exiting eval tree: data.helm_repository.weaveworks
2019/06/26 16:28:20 [TRACE] vertex "data.helm_repository.weaveworks": visit complete
2019/06/26 16:28:20 [TRACE] vertex "data.helm_repository.weaveworks": dynamic subgraph completed successfully
2019/06/26 16:28:20 [TRACE] vertex "data.helm_repository.weaveworks": visit complete
2019/06/26 16:28:20 [TRACE] dag/walk: visiting "helm_release.flux-mycharts"
2019/06/26 16:28:20 [TRACE] vertex "helm_release.flux-mycharts": starting visit (*terraform.NodeRefreshableManagedResource)
2019/06/26 16:28:20 [TRACE] vertex "helm_release.flux-mycharts": expanding dynamic subgraph
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.ResourceCountTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.ResourceCountTransformer with new graph:
helm_release.flux-mycharts - *terraform.NodeRefreshableManagedResourceInstance
------
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.OrphanResourceCountTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.OrphanResourceCountTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.AttachStateTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.AttachStateTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.TargetsTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.TargetsTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.ReferenceTransformer
2019/06/26 16:28:20 [DEBUG] ReferenceTransformer: "helm_release.flux-mycharts" references: []
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.ReferenceTransformer (no changes)
2019/06/26 16:28:20 [TRACE] Executing graph transform *terraform.RootTransformer
2019/06/26 16:28:20 [TRACE] Completed graph transform *terraform.RootTransformer (no changes)
2019/06/26 16:28:20 [TRACE] vertex "helm_release.flux-mycharts": entering dynamic subgraph
2019/06/26 16:28:20 [TRACE] dag/walk: updating graph
2019/06/26 16:28:20 [TRACE] dag/walk: added new vertex: "helm_release.flux-mycharts"
2019/06/26 16:28:20 [TRACE] dag/walk: visiting "helm_release.flux-mycharts"
2019/06/26 16:28:20 [TRACE] vertex "helm_release.flux-mycharts": starting visit (*terraform.NodeRefreshableManagedResourceInstance)
2019/06/26 16:28:20 [TRACE] NodeRefreshableManagedResourceInstance: helm_release.flux-mycharts will be refreshed
2019/06/26 16:28:20 [TRACE] vertex "helm_release.flux-mycharts": evaluating
2019/06/26 16:28:20 [TRACE] [walkRefresh] Entering eval tree: helm_release.flux-mycharts
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalSequence
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalGetProvider
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalReadState
2019/06/26 16:28:20 [TRACE] EvalReadState: reading state for helm_release.flux-mycharts
2019/06/26 16:28:20 [TRACE] UpgradeResourceState: schema version of helm_release.flux-mycharts is still 0; calling provider "helm" for any other minor fixups
2019/06/26 16:28:20 [TRACE] GRPCProvider: UpgradeResourceState
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalRefresh
2019/06/26 16:28:20 [TRACE] GRPCProvider: ReadResource
helm_release.flux-mycharts: Refreshing state... [id=meg-relay-flux]
2019-06-26T16:28:20.700-0400 [DEBUG] plugin.terraform-provider-kubernetes_v1.7.0_x4: 2019/06/26 16:28:20 [INFO] Reading service account tiller
2019-06-26T16:28:20.751-0400 [DEBUG] plugin.terraform-provider-kubernetes_v1.7.0_x4: 2019/06/26 16:28:20 [INFO] Received service account: &v1.ServiceAccount{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"tiller", GenerateName:"", Namespace:"kube-system", SelfLink:"/api/v1/namespaces/kube-system/serviceaccounts/tiller", UID:"7258e31e-9824-11e9-8c55-e67c75dc3c5e", ResourceVersion:"704432", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63697158591, loc:(*time.Location)(0x3c0c2c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Initializers:(*v1.Initializers)(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Secrets:[]v1.ObjectReference{v1.ObjectReference{Kind:"", Namespace:"", Name:"tiller-token-kzr2g", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}}, ImagePullSecrets:[]v1.LocalObjectReference(nil), AutomountServiceAccountToken:(*bool)(0xc000451cc6)}
2019-06-26T16:28:20.751-0400 [DEBUG] plugin.terraform-provider-kubernetes_v1.7.0_x4: 2019/06/26 16:28:20 [DEBUG] Default secret name is "tiller-token-lh8c5"
2019-06-26T16:28:20.751-0400 [DEBUG] plugin.terraform-provider-kubernetes_v1.7.0_x4: 2019/06/26 16:28:20 [DEBUG] Flattened secrets: []interface {}{map[string]interface {}{"name":"tiller-token-kzr2g"}}
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalWriteState
2019/06/26 16:28:20 [TRACE] EvalWriteState: writing current state object for kubernetes_service_account.tiller_service_account
2019/06/26 16:28:20 [TRACE] [walkRefresh] Exiting eval tree: kubernetes_service_account.tiller_service_account
2019/06/26 16:28:20 [TRACE] vertex "kubernetes_service_account.tiller_service_account": visit complete
2019/06/26 16:28:20 [TRACE] dag/walk: visiting "provider.kubernetes (close)"
2019/06/26 16:28:20 [TRACE] vertex "provider.kubernetes (close)": starting visit (*terraform.graphNodeCloseProvider)
2019/06/26 16:28:20 [TRACE] vertex "provider.kubernetes (close)": evaluating
2019/06/26 16:28:20 [TRACE] [walkRefresh] Entering eval tree: provider.kubernetes (close)
2019/06/26 16:28:20 [TRACE] <root>: eval: *terraform.EvalCloseProvider
2019/06/26 16:28:20 [TRACE] GRPCProvider: Close
2019-06-26T16:28:20.755-0400 [DEBUG] plugin: plugin process exited: path=/Users/jharlow/git/maas360-docker/terraform-relay-iks/.terraform/plugins/darwin_amd64/terraform-provider-kubernetes_v1.7.0_x4 pid=77227
2019-06-26T16:28:20.755-0400 [DEBUG] plugin: plugin exited
2019/06/26 16:28:20 [TRACE] [walkRefresh] Exiting eval tree: provider.kubernetes (close)
2019/06/26 16:28:20 [TRACE] vertex "provider.kubernetes (close)": visit complete
2019-06-26T16:28:21.245-0400 [DEBUG] plugin.terraform-provider-helm_v0.10.0_x4: 2019/06/26 16:28:21 [DEBUG] Created tunnel using local port: '62642'
2019/06/26 16:28:25 [TRACE] dag/walk: vertex "root" is waiting for "provider.helm (close)"
2019/06/26 16:28:25 [TRACE] dag/walk: vertex "provider.helm (close)" is waiting for "helm_release.flux-mycharts"
2019-06-26T16:28:26.246-0400 [DEBUG] plugin.terraform-provider-helm_v0.10.0_x4: 2019/06/26 16:28:26 [DEBUG] could not get release context deadline exceeded
2019/06/26 16:28:26 [ERROR] <root>: eval: *terraform.EvalRefresh, err: context deadline exceeded
2019/06/26 16:28:26 [ERROR] <root>: eval: *terraform.EvalSequence, err: context deadline exceeded
2019/06/26 16:28:26 [TRACE] [walkRefresh] Exiting eval tree: helm_release.flux-mycharts
2019/06/26 16:28:26 [TRACE] vertex "helm_release.flux-mycharts": visit complete
2019/06/26 16:28:26 [TRACE] vertex "helm_release.flux-mycharts": dynamic subgraph encountered errors
2019/06/26 16:28:26 [TRACE] vertex "helm_release.flux-mycharts": visit complete
2019/06/26 16:28:26 [TRACE] dag/walk: upstream of "provider.helm (close)" errored, so skipping
2019/06/26 16:28:26 [TRACE] dag/walk: upstream of "root" errored, so skipping

2019/06/26 16:28:26 [TRACE] statemgr.Filesystem: removing lock metadata file .terraform.tfstate.lock.info
Error: context deadline exceeded


2019/06/26 16:28:26 [TRACE] statemgr.Filesystem: unlocking terraform.tfstate using fcntl flock
2019-06-26T16:28:26.251-0400 [DEBUG] plugin: plugin process exited: path=/Users/jharlow/git/maas360-docker/terraform-relay-iks/.terraform/plugins/darwin_amd64/terraform-provider-helm_v0.10.0_x4 pid=77226
2019-06-26T16:28:26.252-0400 [DEBUG] plugin: plugin exited

Hello @jharlow1!

It looks like Helm provider has an issue with enable_tls and certificates. It may not have to do with TLS and more to do with the certificate directory. Maybe settting HELM_HOME might help.

I’m not certain if it is in the process of being fixed, there seems to be an open PR and a general consensus that enable_tls functionality might need additional work. I would reach out on one of these two threads and see if there is more information.

I have HELM_HOME set and all the certs are in that location. I’ve tried explicitly and not explicitly setting everything with same result.