fix(elbv2): stop modeling runtime-managed TG Targets and LoadBalancerArns

Targets is populated at runtime by ECS Services and any other consumer of the register-targets API. LoadBalancerArns is populated when a Listener attaches the target group to an ALB. Neither field is meaningfully user-settable.

Tracking these in formae state caused the periodic Synchronizer to write a new resource version on every ECS task placement and every Listener attach. The reconcile drift gate then rejected subsequent applies with the stacks-have-been-modified error even though the user had not changed their forma, forcing operators into force-mode or extract-and-absorb workarounds on every reconcile.

Both fields are now dropped from the schema and stripped from the AWS Read response before the result enters formae state. Mirrors the existing pattern for other resource types where a returned field is owned by a sibling resource or external system.

Author: JeroenSoeters

pkg/ccx/client.go

@@ -52,6 +52,14 @@ var IgnoredFields = map[string][]string{
 	"AWS::EC2::SecurityGroup":                      {"$.SecurityGroupEgress", "$.SecurityGroupIngress"},
 	"AWS::IAM::Role":                               {"$.Policies"},
 	"AWS::ElasticBeanstalk::ConfigurationTemplate": {"$.OptionSettings"},
+	// Targets is populated at runtime by ECS Services (and other consumers
+	// calling register-targets); LoadBalancerArns is populated when a
+	// Listener attaches the TG to an ALB. Neither is meaningfully
+	// user-settable, and tracking them in formae state makes the
+	// Synchronizer write a new resource version on every task placement
+	// or attach — which then trips the reconcile drift gate on the next
+	// apply. Strip them in Read so they never enter the stored state.
+	"AWS::ElasticLoadBalancingV2::TargetGroup": {"$.Targets", "$.LoadBalancerArns"},
 }
 
 // normalizeCompositeIdentifier fixes inconsistencies in CloudControl composite

schema/pkl/elasticloadbalancingv2/targetgroup.pkl

@@ -17,13 +17,6 @@ open class Matcher extends formae.SubResource {
     httpCode: String?
 }
 
-@aws.SubResourceHint
-open class TargetDescription extends formae.SubResource {
-    availabilityZone: aws.AvailabilityZone?
-    id: String
-    port: Int?
-}
-
 @aws.SubResourceHint
 open class TargetGroupAttribute extends formae.SubResource {
     key: String?
@@ -41,9 +34,6 @@ open class TargetGroupResolvable extends formae.Resolvable {
     hidden arn: TargetGroupResolvable = (this) {
         property = "TargetGroupArn"
     }
-    hidden loadBalancerArns: TargetGroupResolvable = (this) {
-        property = "LoadBalancerArns"
-    }
 
     hidden targetGroupArn: TargetGroupResolvable = (this) {
         property = "TargetGroupArn"
@@ -126,9 +116,6 @@ open class TargetGroup extends formae.Resource {
     @aws.FieldHint{createOnly = true}
     targetType: String?
 
-    @aws.FieldHint{hasProviderDefault = true}
-    targets: Listing<TargetDescription>?
-
     @aws.FieldHint{hasProviderDefault = true}
     unhealthyThresholdCount: Int?