Istiod fails to come up if SMCP deleted during reconciliation

1. create an SMCP
2. delete it while it's in reconcile failed state. Wait for all components to be removed and the SMCP to be removed.
3. Create a new smcp in the same namespace. Istiod fails to come up with repeated errors similar to the below

   // Some comments here
   2021-09-24T19:57:30.551402Z	error	klog	github.com/maistra/xns-informer/pkg/informers/informer.go:204: Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps is forbidden: User "system:serviceaccount:istio-system:istiod-service-account-basic" cannot list resource "configmaps" in API group "" in the namespace "foo"
   

Create an SMCP in a different namespace and everything comes up.
Delete the namespace and recreate the namespace before creating the SMCP. Everything comes up.