Create Kubernetes users restricted to one namespace with resource limits