install gateway-system prior to using gateway resources

test/config/ytt/ingress/gateway-api/ordering.yaml

@@ -0,0 +1,30 @@
+#! The resources in net-certmanager expect cert-manager to be up and running.
+#! This overlay tells kapp to wait with applying net-certmanager until cert-manager ready.
+
+#@ load("@ytt:overlay", "overlay")
+#@ load("helpers.lib.yaml", "subset", "label_subset")
+
+#@overlay/match by=subset(namespace="gateway-system"), expects="1+"
+---
+metadata:
+  #@overlay/match missing_ok=True
+  annotations:
+    #@overlay/match missing_ok=True
+    kapp.k14s.io/change-group: "gateway-system"
+
+#@overlay/match by=subset(kind="GatewayClass"), expects="1+"
+---
+metadata:
+  #@overlay/match missing_ok=True
+  #@overlay/match-child-defaults missing_ok=True
+  annotations:
+    kapp.k14s.io/change-group: "gateway-class"
+    kapp.k14s.io/change-rule: "upsert after upserting gateway-system"
+#@overlay/match by=subset(kind="Gateway"), expects="1+"
+---
+metadata:
+  #@overlay/match missing_ok=True
+  #@overlay/match-child-defaults missing_ok=True
+  annotations:
+    kapp.k14s.io/change-group: "gateway-class"
+    kapp.k14s.io/change-rule: "upsert after upserting gateway-system"