...
Note!
Starting from version 1.4.0, OCI Native Ingress Controller will start configuring NSG associations and tags for LoadBalancers managed by it. For all LoadBalancers managed by NIC that have NSG associations, add the “oci“oci-native-ingress.oraclecloud.com/network-security-group-ids” annotation in the corresponding IngressClass resource to ensure NIC will retain them on upgrade.
...