title: Update serviceAnnotations after istio installation
body: <p>I installed istio using istioctl on AWS EKS cluster.</p>
  <pre><code>**Version**
  EKS : 1.21
  Istio : 1.11.1
  </code></pre>
  <pre><code>**Command**
  # istioctl install -y -f istio-manifest.yaml
  </code></pre>
  <pre><code>**istio-manifest.yaml**
  apiVersion: install.istio.io/v1alpha1
  kind: IstioOperator
  spec:
    meshConfig:
      accessLogFile: /dev/stdout
    components:
      ingressGateways:
        - name: istio-ingressgateway
          enabled: true
          k8s:
            hpaSpec:
              minReplicas: 1
              maxReplicas: 3
            serviceAnnotations:
              service.beta.kubernetes.io/aws-load-balancer-name: 'test-istio'
              service.beta.kubernetes.io/aws-load-balancer-subnets: &quot;subnet-xxxxx,subnet-xxxxx&quot;
              service.beta.kubernetes.io/aws-load-balancer-type: &quot;external&quot;
              service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: &quot;ip&quot;
              service.beta.kubernetes.io/aws-load-balancer-internal: &quot;true&quot;
              service.beta.kubernetes.io/aws-load-balancer-ssl-ports: &quot;443&quot;
              service.beta.kubernetes.io/aws-load-balancer-backend-protocol: &quot;tcp&quot;
              service.beta.kubernetes.io/aws-load-balancer-ssl-cert: &quot;arn:aws:acm:us-west-1:xxxxx:certificate/xxxxx&quot;
              service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: &quot;true&quot;
              service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: &quot;preserve_client_ip.enabled=false&quot;
            service:
              ports:
                - name: status
                  protocol: TCP
                  port: 15021
                  targetPort: 15021
                - name: https
                  protocol: TCP
                  port: 443
                  targetPort: 8443
                - name: grpc
                  protocol: TCP
                  port: 9090
                  targetPort: 9090
  </code></pre>
  <p>An NLB was created successfully. After istio installed, I changed preserve_client_ip.enabled from false to true and then ran the installation command again. However the attribute of the NLB was not changed, still false. Of course, AWS Load Balancer Controller was installed correctly.</p>
  <p>How can I change the attribute after istio installation?</p>