Recovering from a deleted kube-system namespace

Issue

• Someone deleted the kube-system project/namespace. How do we recover?
• kube-system is stuck in terminating

Apr 19 13:31:03 master2.example.com atomic-openshift-master-controllers[85557]: E0419 13:31:03.015790   85557 tokens_controller.go:265] error synchronizing serviceaccount kube-system/endpoint-controller: secrets "endpoint-controller-token-shc1l" is forbidden: unable to create new content in namespace kube-system because it is being terminated.