From 2c378beb64b29320adbfc9b68d1624552ec3fed3 Mon Sep 17 00:00:00 2001
From: Shihang Zhang <zshihang@google.com>
Date: Thu, 5 Nov 2020 11:11:35 -0800
Subject: [PATCH] abort if namespace doesn't exist or terminating

---
 pkg/controller/certificates/rootcacertpublisher/publisher.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkg/controller/certificates/rootcacertpublisher/publisher.go b/pkg/controller/certificates/rootcacertpublisher/publisher.go
index 34fd3127a5d2..ee8925cb3f9b 100644
--- a/pkg/controller/certificates/rootcacertpublisher/publisher.go
+++ b/pkg/controller/certificates/rootcacertpublisher/publisher.go
@@ -187,6 +187,10 @@ func (c *Publisher) syncNamespace(ns string) error {
 				"ca.crt": string(c.rootCA),
 			},
 		}, metav1.CreateOptions{})
+		// don't retry a create if the namespace doesn't exist or is terminating
+		if apierrors.IsNotFound(err) || apierrors.HasStatusCause(err, v1.NamespaceTerminatingCause) {
+			return nil
+		}
 		return err
 	case err != nil:
 		return err