feat(network): route cluster egress through an owned public IP

[thenav56]

TF Plan

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place

Terraform will perform the following actions:

  # module.resources.azurerm_kubernetes_cluster.ifrcgo will be updated in-place
  ~ resource "azurerm_kubernetes_cluster" "ifrcgo" {
        id                                  = "/subscriptions/xyz/resourceGroups/ifrctgo002rg/providers/Microsoft.ContainerService/managedClusters/ifrctgo-cluster"
        name                                = "ifrctgo-cluster"
        tags                                = {
            "Environment" = "staging"
            "ManagedBy"   = "IFRCGo"
        }
        # (40 unchanged attributes hidden)

      ~ network_profile {
            # (17 unchanged attributes hidden)

          ~ load_balancer_profile {
              ~ idle_timeout_in_minutes     = 0 -> 30
              ~ outbound_ip_address_ids     = [] -> (known after apply)
                # (5 unchanged attributes hidden)
            }
        }

        # (5 unchanged blocks hidden)
    }

  # module.resources.azurerm_public_ip.egress will be created
  + resource "azurerm_public_ip" "egress" {
      + allocation_method       = "Static"
      + ddos_protection_mode    = "VirtualNetworkInherited"
      + fqdn                    = (known after apply)
      + id                      = (known after apply)
      + idle_timeout_in_minutes = 4
      + ip_address              = (known after apply)
      + ip_version              = "IPv4"
      + location                = "northeurope"
      + name                    = "ifrctgoEgressPublicIP"
      + resource_group_name     = "ifrctgo002rg"
      + sku                     = "Standard"
      + sku_tier                = "Regional"
      + tags                    = {
          + "Environment" = "staging"
        }
    }

Plan: 1 to add, 1 to change, 0 to destroy.

Changes to Outputs:
  + egress_public_ip                    = (known after apply)
  ~ resources                           = (sensitive value)