Services created in GKE clusters 1.17.6-gke.7 and up with VPC-native traffic routing enabled are annotated automatically with cloud.google.com/neg: '{"ingress": true}'. This means that this annotation is not required explicitly and can be removed.
More details in GKE Load Balancing documentation.