Cannot reproduce the bug. I deployed openstack using puppet-openstack-integratrion, scenario003. After a successful installation I made this diff: --- /etc/puppet/modules/openstack_integration/manifests/keystone.pp.orig 2016-01-04 14:42:43.652000000 -0500 +++ /etc/puppet/modules/openstack_integration/manifests/keystone.pp 2016-01-04 14:37:14.726000000 -0500 @@ -24,6 +24,7 @@ } class { '::keystone::endpoint': default_domain => 'admin', + version => '', } } And then re-run: puppet apply -d /etc/puppet/modules/openstack_integration/fixtures/scenario003.pp Got this is the log: Notice: /Stage[main]/Keystone::Endpoint/Keystone::Resource::Service_identity[keystone]/Keystone_endpoint[RegionOne/keystone::identity]/public_url: public_url changed 'http://127.0.0.1:5000/v2.0' to 'http://127.0. 0.1:5000' Notice: /Stage[main]/Keystone::Endpoint/Keystone::Resource::Service_identity[keystone]/Keystone_endpoint[RegionOne/keystone::identity]/internal_url: internal_url changed 'http://127.0.0.1:5000/v2.0' to 'http://12 7.0.0.1:5000' Notice: /Stage[main]/Keystone::Endpoint/Keystone::Resource::Service_identity[keystone]/Keystone_endpoint[RegionOne/keystone::identity]/admin_url: admin_url changed 'http://127.0.0.1:35357/v2.0' to 'http://127.0.0 .1:35357' And then: openstack --os-username admin --os-password a_big_secret --os-tenant-name openstack --os-auth-url http://127.0.0.1:5000/v2.0 endpoint list +----------------------------------+-----------+--------------+--------------+ | ID | Region | Service Name | Service Type | +----------------------------------+-----------+--------------+--------------+ | 5c1233e713e04b169b844476e095fdce | RegionOne | keystone | identity | | c14d35a32b4048acb5e3e032e7d02a75 | RegionOne | cinderv2 | volumev2 | | 249754f6d457487a8f18f3c36ed9e1c7 | RegionOne | glance | image | | 8599334857854ca08dd09cdeb70a4438 | RegionOne | novav3 | computev3 | | 83bb1d5f2c0243a9a4961cb85481a060 | RegionOne | cinder | volume | | d103d19fc2584a5ab4a53af212a988ed | RegionOne | neutron | network | | b1b4f9b3fd844503b5354e3d379ff34f | RegionOne | nova | compute | | 54cf345b9d24424eb6ec0c8fcce4d7b0 | RegionOne | nova_ec2 | ec2 | +----------------------------------+-----------+--------------+--------------+ followed by: openstack --os-username admin --os-password a_big_secret --os-tenant-name openstack --os-auth-url http://127.0.0.1:5000/v2.0 endpoint show 5c1233e713e04b169b844476e095fdce +--------------+----------------------------------+ | Field | Value | +--------------+----------------------------------+ | adminurl | http://127.0.0.1:35357 | | enabled | True | | id | 5c1233e713e04b169b844476e095fdce | | internalurl | http://127.0.0.1:5000 | | publicurl | http://127.0.0.1:5000 | | region | RegionOne | | service_id | 4adc7d0f424c4143878c7119170f6a2f | | service_name | keystone | | service_type | identity | +--------------+----------------------------------+ Which is as expected. Context: - puppet-openstack-integration 366269b92675c0e8fe516204a19f1fa4421543fb - centos7 Is there something I miss ?