feat/elbv2/tg: CAPA changes to set cluster TG health check

CAPA sets the listener protocol and port as the target health check
configuration (protocol and port) for all listeners. When the
HealthCheckProtocol is set to the LB, only the API's target group will be
configured to use the desired protocol.

Motivated by keeping the compatibility with Terraform, the upstream
PR#4849 has been created to implement the customization for API target
group, and more flexibility for the additional listeners.

This change sets the health check for all listeners used by Load Balancers
managed by CAPA, both primary and secondary,
as well the additional listeners for MCS.

Author: mtulio

pkg/asset/manifests/aws/cluster.go

@@ -150,10 +150,26 @@ func GenerateClusterAssets(ic *installconfig.InstallConfig, clusterID *installco
 				LoadBalancerType:       capa.LoadBalancerTypeNLB,
 				Scheme:                 &capa.ELBSchemeInternal,
 				CrossZoneLoadBalancing: true,
+				HealthCheckProtocol:    &capa.ELBProtocolHTTPS,
+				HealthCheck: &capa.TargetGroupHealthCheckAPISpec{
+					IntervalSeconds:         ptr.To[int64](10),
+					TimeoutSeconds:          ptr.To[int64](10),
+					ThresholdCount:          ptr.To[int64](2),
+					UnhealthyThresholdCount: ptr.To[int64](2),
+				},
 				AdditionalListeners: []capa.AdditionalListenerSpec{
 					{
 						Port:     22623,
 						Protocol: capa.ELBProtocolTCP,
+						HealthCheck: &capa.TargetGroupHealthCheckAdditionalSpec{
+							Protocol:                ptr.To[string](capa.ELBProtocolHTTPS.String()),
+							Port:                    ptr.To[string]("22623"),
+							Path:                    ptr.To[string]("/healthz"),
+							IntervalSeconds:         ptr.To[int64](10),
+							TimeoutSeconds:          ptr.To[int64](10),
+							ThresholdCount:          ptr.To[int64](2),
+							UnhealthyThresholdCount: ptr.To[int64](2),
+						},
 					},
 				},
 				IngressRules: []capa.IngressRule{
@@ -177,6 +193,13 @@ func GenerateClusterAssets(ic *installconfig.InstallConfig, clusterID *installco
 			LoadBalancerType:       capa.LoadBalancerTypeNLB,
 			Scheme:                 &capa.ELBSchemeInternetFacing,
 			CrossZoneLoadBalancing: true,
+			HealthCheckProtocol:    &capa.ELBProtocolHTTPS,
+			HealthCheck: &capa.TargetGroupHealthCheckAPISpec{
+				IntervalSeconds:         ptr.To[int64](10),
+				TimeoutSeconds:          ptr.To[int64](10),
+				ThresholdCount:          ptr.To[int64](2),
+				UnhealthyThresholdCount: ptr.To[int64](2),
+			},
 			IngressRules: []capa.IngressRule{
 				{
 					Description: "Kubernetes API Server traffic for public access",