fix: semaphore+singleflight for ensureUserNS, fix 504 on 10 parallel new users (v0.8.12)

deploy/rbac/console-ns-manager.yaml

@@ -4,7 +4,7 @@ metadata:
   name: fission-console-ns-manager
 rules:
 - apiGroups: [""]
-  resources: ["namespaces"]
+  resources: ["namespaces", "serviceaccounts", "resourcequotas", "limitranges"]
   verbs: ["get", "create", "list"]
 - apiGroups: ["fission.io"]
   resources: ["*"]
@@ -21,6 +21,9 @@ rules:
 - apiGroups: ["apps"]
   resources: ["deployments"]
   verbs: ["get", "patch"]
+- apiGroups: ["networking.k8s.io"]
+  resources: ["networkpolicies"]
+  verbs: ["get", "create"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding