GetToken creates a token by authenticate with keystone.

NewConfig returns a Config.

NewKeystoneAuth returns a new KeystoneAuth controller.

By now only project syncing is supported TODO(mfedosin): Implement syncing of role assignments, system role assignments, and user groups.

By now only project syncing is supported TODO(mfedosin): Implement syncing of role assignments, system role assignments, and user groups.

Supported types for policy match.

Supported types for policy match.

Supported types for policy match.

Supported types for policy match.

Authenticator contacts openstack keystone to validate user's token passed in the request.

Authorizer contacts openstack keystone to check whether the user can perform requested operations.

Config configures a keystone webhook server.

KeystoneAuth manages authentication and authorization.

Syncer synchronizes auth data between Keystone and Kubernetes.