Comment 2 for bug 1760064

There should not be any need to specify KEYSTONE_AUTH_PASSWORD under contrail_configuration section.
Just specifying in kolla_passwords section should be sufficient. this will create credentials in keystone and contrail configurations are derived from this to use this password for authentication.