Add a new external user (or bot) in k8s

and do it properly with rbac