I am using official kong helm chart and have setup two kong clusters, one for internal endpoints and other for public. I have two separate ingress controllers called kong-internal and kong-public and api endpoints are marked as public or internal by specifying the annotation on the ingress. The kong proxy service is of type Load Balancer for both the kong clusters. The load balancer of internal kong cluster is marked as internal and hence is accessible only from within the VPC.
Now my requirement is that i want to expose only the health check endpoint of private services to public load balancer so that it can be accessed by external monitoring system, keeping rest of the endpoints for that service internal. I am not very sure of how to do this.