apply ordering to RBAC resources in FeatureGates package

Signed-off-by: Harish Yayi <yharish991@gmail.com>

Author: yharish991

packages/kbld-config.yaml

@@ -54,4 +54,3 @@ overrides:
     newImage: ""
   - image: tanzu-cli-plugins/secret-windows-amd64:latest
     newImage: ""
-

packages/management/featuregates/bundle/config/upstream/rbac.yaml

@@ -3,12 +3,16 @@ kind: ServiceAccount
 metadata:
   labels:
     app: tanzu-featuregates-manager
+  annotations:
+    kapp.k14s.io/change-group: "featuregates.config.tanzu.vmware.com/serviceaccount"
   name: tanzu-featuregates-manager-sa
   namespace: tkg-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
+  annotations:
+    kapp.k14s.io/change-group: "featuregates.config.tanzu.vmware.com/serviceaccount"
   name: tanzu-featuregates-manager-clusterrole
 rules:
   - apiGroups:
@@ -59,6 +63,8 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
+  annotations:
+    kapp.k14s.io/change-rule: "upsert after upserting featuregates.config.tanzu.vmware.com/serviceaccount"
   name: tanzu-featuregates-manager-clusterrolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io