diff --git a/components/openstack-secrets.tpl.yaml b/components/openstack-secrets.tpl.yaml
index 7d45ffc49..8184b6ca5 100644
--- a/components/openstack-secrets.tpl.yaml
+++ b/components/openstack-secrets.tpl.yaml
@@ -7,42 +7,6 @@ endpoints:
 
   # 'identity' endpoints are for keystone access
   identity:
-    auth:
-      # this is the 'admin' user created in keystone by the initial start
-      # and used by the other services to create their service accounts
-      # and endpoint in the service catalog.
-      admin:
-        password: "${ADMIN_KEYSTONE_PASSWORD}"
-        region_name: "${DEPLOY_NAME}"
-      # this user is the service account that glance uses
-      glance:
-        password: "${GLANCE_KEYSTONE_PASSWORD}"
-        region_name: "${DEPLOY_NAME}"
-      # this user is the service account that ironic uses
-      ironic:
-        password: "${IRONIC_KEYSTONE_PASSWORD}"
-        region_name: "${DEPLOY_NAME}"
-      # this user is the service account that neutron uses
-      neutron:
-        password: "${NEUTRON_KEYSTONE_PASSWORD}"
-        region_name: "${DEPLOY_NAME}"
-      # this user is the service account that nova uses
-      nova:
-        password: "${NOVA_KEYSTONE_PASSWORD}"
-        region_name: "${DEPLOY_NAME}"
-      # this user is the service account that placement uses
-      placement:
-        password: "${PLACEMENT_KEYSTONE_PASSWORD}"
-        region_name: "${DEPLOY_NAME}"
-      # this user is the service account that cinder uses
-      cinder:
-        password: "${CINDER_KEYSTONE_PASSWORD}"
-        region_name: "${DEPLOY_NAME}"
-      # this user is the service account that octavia uses
-      octavia:
-        password: "${OCTAVIA_KEYSTONE_PASSWORD}"
-        region_name: "${DEPLOY_NAME}"
-
     # set our public facing URL
     host_fqdn_override:
       public: