A platform team wants to give three separate development groups their own isolated area within a single Kubernetes cluster. Each group should be able to create Pods, Services, and ConfigMaps with names that may overlap with other groups (for example, all three want a Service called 'api'), without conflicting with one another. Which Kubernetes resource is designed to provide this logical partitioning?