Add fully-private ACK pattern

[candonov]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

What is the outcome that you are trying to reach?

An ACK pattern showcasing how to install the ACK controllers in a fully private environment.

Describe the solution you would like

The pattern should include specifics on the fully private installation:

1. Deploying an EKS cluster in a fully-private VPC
2. Setting ECR pull trough cache to pull the ACK images trough a private ECR
3. VPC endpoints for the services the controllers need to talk to
4. Documentation on how controllers can communicate with global services that do not provide VPC endpoints such as IAM (setting a proxy and what controllers settings are needed to communicate trough the proxy)

Describe alternatives you have considered

None.

Additional context

This is one of 3 patterns for ACK
ack
├── basic
├── fully-private
└── cross-account