even if using your own
cluster, to avoid interfering with other namespaces in
your cluster.</p><p>Create a role to allow read-write access to each participant&rsquo;s namespace.
Bind the participant&rsquo;s service account to this role and to the role for
reading resources from <code>istio-system</code>:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -f - &lt;&lt;EOF
kind: Role
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: ${NAMESPACE}-access
  name