Hi,
Giving some users edit access to only "certain namespaces that start with a certain prefix" was a bit of a challenge recently. Ended up with letting these users deploy a RoleBinding in those namespaces to a ClusterRole. Namespace creation is restricted to the CI/CD tools. In the end it works well enough, but felt a bit cumbersome.