When reconciling the Kourier install with our operator, we only check if the Kourier Deployments match and if so bail out from ensuring all the other bits match. This means if someone mucks with, accidentally deletes, or otherwise causes a change to any of the other Kourier resources - ClusterRoleBinding in my specific case - the operator won't fix those accidental changes.

https://github.com/openshift-knative/serverless-operator/blob/6ed972d0895304c7f4001ddc22552c4a017095be/knative-operator/pkg/controller/knativeserving/kourier/kourier.go#L36