Charm Config to Disable Just-in-Time User Creation #488

Context

The charm has to support multi-tenancy according to the design outlined in the official spec.

What needs to get done

Add a boolean charm config option to disable just-in-time (JIT) user creation, even if newly see users are not granted anything by default, for use cases where upstream bugs and security vulnerabilities could be exploited to gain access, so that when the non-default JIT user creation is disabled, user creation is handled only on relations with data-integrator and data-kubeflow-integrator, with the charm refusing to authenticate newly seen identities.

Definition of Done

A boolean charm config option to disable just-in-time (JIT) user creation is added, even if newly see users are not granted anything by default, for use cases where upstream bugs and security vulnerabilities could be exploited to gain access, so that when the non-default JIT user creation is disabled, user creation is handled only on relations with data-integrator and data-kubeflow-integrator, with the charm refusing to authenticate newly seen identities.