Cannot terminate TLS at NLB listener, target group inherits the protocol from listener

[tsingh2k15]

I am using following dependency versions:

"dependencies": {
    "@aws-cdk/aws-dynamodb": "1.147.0",
    "@aws-cdk/aws-ec2": "1.147.0",
    "@aws-cdk/aws-ecr-assets": "1.147.0",
    "@aws-cdk/aws-ecs": "1.147.0",
    "@aws-cdk/aws-ecs-patterns": "1.147.0",
    "@aws-cdk/aws-rds": "1.147.0",
    "@aws-cdk/core": "1.147.0",
    "@aws-cdk/custom-resources": "1.147.0",
    "@aws-cdk/aws-certificatemanager": "1.147.0",
    "@aws-cdk/aws-elasticloadbalancingv2": "1.147.0",
    "@aws-cdk/aws-secretsmanager": "1.147.0",
    "@aws-cdk/aws-logs": "1.147.0",
    "@aws-cdk/aws-efs": "1.147.0",
    "@aws-cdk/aws-iam": "1.147.0",
    "@types/uuid": "8.3.4",
    "aws-cdk": "^2.18.0",
    "uuid": "^8.3.2"
  }

With these, I am running into an issue where I cannot specify TCP protocol on target group( ECS Fargate service) fronted by NLB which is configured with TLS listener. It seems that target group inherits the settings from listener even if I have specified that it is not desired. My expectation is that listener will use TLS while the target group will be communicated with TCP. But the observed behavior is that both listener and target groups are using TLS.

Below is the code snippet(TypeScript) I am using to accomplish this. Any guidance around this will be helpful. Thanks!
As per documentation, this seems to be a supported combination https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html

this.fargateService = new ecs.FargateService(this, name, {
      cluster: props.cluster,
      taskDefinition: props.taskDefinition,
      securityGroups: [props.myVpcSecurityGroup],
      platformVersion: FargatePlatformVersion.VERSION1_4
    });

 let loadBalancer = new elbv2.NetworkLoadBalancer(
      this,
      "NetworkLoadBalancer",
      {
        vpc: vpc,
        internetFacing: false,
        crossZoneEnabled: true
      }
    );

listener = loadBalancer.addListener("Listener", {
        port: 443,
        protocol: elbv2.Protocol.TLS,
        certificates:[{certificateArn:certificateArn}],
        sslPolicy: elbv2.SslPolicy.RECOMMENDED
      });

listener.addTargets(
      "FargateServiceTargetGroup",
      {
        port: 80,
        protocol: elbv2.Protocol.TCP,
        targets: [this.fargateService],
        healthCheck: {
          port: "traffic-port",
          protocol: elbv2.Protocol.HTTP,
          path: "/health"
        }
      }
    );