[EKS] [request]: ARM64 AMI with Calico Support (iptables rule to API server)

Hi,

In ARM64 AMI (Amazon Linux 2 ARM64) on EKS (ami-052b16853b76bb12a) there is no DNAT iptables rules to API Server in bootstrap. Therefore when I am using Calico network provider container with calico-node can't be running. Ive got error that:

```
Get https://172.20.0.1:443/version: dial tcp 172.20.0.1:443: i/o timeout
```

The only resolution that I found that is copy iptables rules that was generated by healthy node (on x86_64 all works fine).
Its very annoying, so that will be very useful, when boostraping script on EKS AMI Amazon Linux ARM64 will have DNAT rule to API server.

Start with the EKS Amazon Linux 2 ARM64 bootstrap behavior and compare its generated iptables rules with a healthy x86_64 node. Verify the API server DNAT rule for 172.20.0.1:443 and confirm that a Calico node can start without manually copying rules.

Written by the indexing model from the issue text.