AFAIK the whole RBAC-authorization came from the openshift people. So they solved the whole problem already and put it in a really nice package. So if you just want to have a multi-tenant kubernetes out of the box you should definitely take a look at openshift.