=== User namespace, pod security and quotas ===
Each user works in their own namespace now, which is auto-generated when your login is created. The naming convention is "firstname-lastname", i.e. you replace all '.'s in your cluster username with '-'. Thus, you need to update set your default namespace in the kubeconfigaccordingly, and perhaps update pod configurations. For security reasons, containers must are forced to run with your own user id and your user group. To make configuration easy, a pod preset which sets all required options (in addition to mounting basic filesystems) is available in your namespace, see examples below for details.
Otherwise, the security policy for pods is now pretty restrictive, in particular, you can not run switch to root inside containers as root anymore. If this presents problems, please contact me so we can think of work out a solution.
Finally, there is now a mechanism in place to set resource quotas for individual users. The preset is quite generous at the moment since we have plenty of resources, but if you believe your account is too limited, please contact me.