ccount
metadata:
  name: ${NAMESPACE}-user
  namespace: $NAMESPACE
EOF
</code></pre></li><li><p>Limit each participant&rsquo;s permissions. During the tutorial, participants only
need to create resources in their namespace and to read resources from
<code>istio-system</code> namespace. It is a good practice, even if using your own
cluster, to avoid interfering with other namespaces in
your cluster.</p><p>Create a role to allow read-write access to each participant&rsquo;s namespace.
Bind the participant&rsq