Add userspace chart and docs

This allows easy creation of user namespaces with limited permissions.

scripts/setup.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+
+# Use
+# ./setup.sh <server_fqdn>
+
+export SERVER=$1
+
+ssh -t $SERVER sudo kubectl -n kube-system create secret generic certsigner --from-file /var/lib/rancher/k3s/server/tls/client-ca.crt --from-file /var/lib/rancher/k3s/server/tls/client-ca.key
+scp certsigner.yaml $SERVER:~/certsigner.yaml
+ssh $SERVER kubectl apply -f certsigner.yaml
+scp clusterrole.yaml $SERVER:~/clusterrole.yaml
+ssh $SERVER kubectl apply -f clusterrole.yaml