Hi are there any examples for setting up EKS ALB ingress where the cluster is on a private subnet (and ALB is on a public subnet)?