1. create an SMCP
2. delete it while it's in reconcile failed state. Wait for all components to be removed and the SMCP to be removed.
3. Create a new smcp in the same namespace. Istiod fails to come up with repeated errors similar to the below

   // Some comments here
   2021-09-24T19:57:30.551402Z	error	klog	github.com/maistra/xns-informer/pkg/informers/informer.go:204: Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps is forbidden: User "system:serviceaccount:istio-system:istiod-service-account-basic" cannot list resource "configmaps" in API group "" in the namespace "foo"
   

Create an SMCP in a different namespace and everything comes up.
Delete the namespace and recreate the namespace before creating the SMCP. Everything comes up.