<p>I am installing istio 1.6.0 using <code>istioctl</code> with below config file:</p>

<pre><code>--
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  profile: default
  components:
    egressGateways:
      - name: istio-egressgateway
        enabled: true
    ingressGateways:
      - name: istio-ingressgateway
        enabled: true
        k8s:
          overlays:
          - kind: Service
            name: istio-ingressgateway
            patches:
            - path: spec.loadBalancerIP
              value: x.x.x.x
            - path: spec.externalTrafficPolicy
              value: Local
            - path: metadata.annotations.[service.beta.kubernetes.io/azure-load-balancer-resource-group]
              value: az-rg-group
</code></pre>

<p>This part giving me an error:</p>

<pre><code>- path: metadata.annotations.[service.beta.kubernetes.io/azure-load-balancer-resource-group]
  value: az-rg-group
</code></pre>

<blockquote>
  <p>Error: failed to apply manifests: errors occurred during operation</p>
</blockquote>

<p>Path is not correct for annotation. How can I provide a path of annotation with valid syntax?</p>

<p>Following this sample code: <a href="https://github.com/istio/istio/blob/master/operator/samples/pilot-advanced-override.yaml" rel="nofollow noreferrer">https://github.com/istio/istio/blob/master/operator/samples/pilot-advanced-override.yaml</a></p>

<p>There is a new field for service annotations. The issue was raised here <a href="https://github.com/istio/istio/issues/20078" rel="nofollow noreferrer">https://github.com/istio/istio/issues/20078</a></p>
<p>Please refer the following example
<a href="https://github.com/istio/istio/blob/ca541df418d0902ebeb9506c84d24c6bd9743801/operator/cmd/mesh/testdata/manifest-generate/input/ingressgateway_k8s_settings.yaml#L14-L15" rel="nofollow noreferrer">ingressgateway_k8s_settings.yaml</a></p>
<pre><code>apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  components:
    pilot:
      enabled: false
    ingressGateways:
    - namespace: istio-system
      name: istio-ingressgateway
      enabled: true
      k8s:
        service:
          externalTrafficPolicy: Local
        serviceAnnotations:
          manifest-generate: &quot;testserviceAnnotation&quot;
        securityContext:
          sysctls:
          - name: &quot;net.ipv4.ip_local_port_range&quot;
            value: &quot;80 65535&quot;
</code></pre>
