de></pre></li><li><p>Create a service account for each participant:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -f - &lt;&lt;EOF
apiVersion: v1
kind: ServiceAccount
metadata:
  name: ${NAMESPACE}-user
  namespace: $NAMESPACE
EOF
</code></pre></li><li><p>Limit each participant&rsquo;s permissions. During the tutorial, participants only
need to create resources in their namespace and to read resources from
<code>istio-system</code> namespace. It is a good practice, 