diff --git a/etc/tempest.conf.tpl b/etc/tempest.conf.tpl
new file mode 100644
index 0000000..6710fd2
--- /dev/null
+++ b/etc/tempest.conf.tpl
@@ -0,0 +1,93 @@
+[identity]
+# This section contains configuration options that a variety of Tempest
+# test clients use when authenticating with different user/tenant
+# combinations
+
+# Set to True if your test environment's Keystone authentication service should
+# be accessed over HTTPS
+use_ssl = %IDENTITY_USE_SSL%
+# This is the main host address of the authentication service API
+host = %IDENTITY_HOST%
+# Port that the authentication service API is running on
+port = %IDENTITY_PORT%
+# Version of the authentication service API (a string)
+api_version = %IDENTITY_API_VERSION%
+# Path to the authentication service tokens resource (do not modify unless you
+# have a custom authentication API and are not using Keystone)
+path = %IDENTITY_PATH%
+# Should typically be left as keystone unless you have a non-Keystone
+# authentication API service
+strategy = %IDENTITY_STRATEGY%
+
+[compute]
+# This section contains configuration options used when executing tests
+# against the OpenStack Compute API.
+
+# This should be the username of a user WITHOUT administrative privileges
+username = %USERNAME%
+# The above non-administrative user's password
+password = %PASSWORD%
+# The above non-administrative user's tenant name
+tenant_name = %TENANT_NAME%
+
+# This should be the username of an alternate user WITHOUT
+# administrative privileges
+alt_username = %ALT_USERNAME%
+# The above non-administrative user's password
+alt_password = %ALT_PASSWORD%
+# The above non-administrative user's tenant name
+alt_tenant_name = %ALT_TENANT_NAME%
+
+# Reference data for tests. The ref and ref_alt should be
+# distinct images/flavors.
+image_ref = %IMAGE_ID%
+image_ref_alt = %IMAGE_ID_ALT%
+flavor_ref = %FLAVOR_REF%
+flavor_ref_alt = %FLAVOR_REF_ALT%
+
+# Number of seconds to wait while looping to check the status of an
+# instance or volume that is building.
+build_interval = %BUILD_INTERVAL%
+
+# Number of seconds to time out on waiting for an instance or volume
+# to build or reach an expected status
+build_timeout = %BUILD_TIMEOUT%
+
+# The type of endpoint for a Compute API service. Unless you have a
+# custom Keystone service catalog implementation, you probably want to leave
+# this value as "compute"
+catalog_type = %COMPUTE_CATALOG_TYPE%
+
+# Does the Compute API support creation of images?
+create_image_enabled = %COMPUTE_CREATE_IMAGE_ENABLED%
+
+# For resize to work with libvirt/kvm, one of the following must be true:
+# Single node: allow_resize_to_same_host=True must be set in nova.conf
+# Cluster: the 'nova' user must have scp access between cluster nodes
+resize_available = %COMPUTE_RESIZE_AVAILABLE%
+
+# Level to log Compute API request/response details.
+log_level = %COMPUTE_LOG_LEVEL%
+
+[image]
+# This section contains configuration options used when executing tests
+# against the OpenStack Images API
+
+# This should be the username of a user WITHOUT administrative privileges
+username = %USERNAME%
+# The above non-administrative user's password
+password = %PASSWORD%
+# The above non-administrative user's tenant name
+tenant_name = %TENANT_NAME%
+
+[compute-admin]
+# This section contains configuration options for an administrative
+# user of the Compute API. These options are used in tests that stress
+# the admin-only parts of the Compute API
+
+# This should be the username of a user WITH administrative privileges
+username = %ADMIN_USERNAME%
+# The above administrative user's password
+password = %ADMIN_PASSWORD%
+# The above administrative user's tenant name
+tenant_name = %ADMIN_TENANT_NAME%