diff --git a/keystone/files/newton/keystone.conf.Debian b/keystone/files/newton/keystone.conf.Debian
index 5da7242..692df8b 100644
--- a/keystone/files/newton/keystone.conf.Debian
+++ b/keystone/files/newton/keystone.conf.Debian
@@ -597,7 +597,7 @@
 # Headers. (list value)
 #expose_headers = X-Auth-Token,X-Openstack-Request-Id,X-Subject-Token
 {% if server.cors.expose_headers is defined %}
-allowed_origin = {{ server.cors.expose_headers }}
+expose_headers = {{ server.cors.expose_headers }}
 {% endif %}
 
 # Maximum cache age of CORS preflight requests. (integer value)
diff --git a/keystone/files/ocata/keystone.conf.Debian b/keystone/files/ocata/keystone.conf.Debian
index aeaf2d1..0823fb1 100644
--- a/keystone/files/ocata/keystone.conf.Debian
+++ b/keystone/files/ocata/keystone.conf.Debian
@@ -669,7 +669,7 @@
 # Headers. (list value)
 #expose_headers = X-Auth-Token,X-Openstack-Request-Id,X-Subject-Token
 {% if server.cors.expose_headers is defined %}
-allowed_origin = {{ server.cors.expose_headers }}
+expose_headers = {{ server.cors.expose_headers }}
 {% endif %}
 
 # Maximum cache age of CORS preflight requests. (integer value)
diff --git a/keystone/files/pike/keystone.conf.Debian b/keystone/files/pike/keystone.conf.Debian
index 84b6b9f..c6938e0 100644
--- a/keystone/files/pike/keystone.conf.Debian
+++ b/keystone/files/pike/keystone.conf.Debian
@@ -669,7 +669,7 @@
 # Headers. (list value)
 #expose_headers = X-Auth-Token,X-Openstack-Request-Id,X-Subject-Token
 {% if server.cors.expose_headers is defined %}
-allowed_origin = {{ server.cors.expose_headers }}
+expose_headers = {{ server.cors.expose_headers }}
 {% endif %}
 
 # Maximum cache age of CORS preflight requests. (integer value)