diff --git a/metadata/service/tempest/init.yml b/metadata/service/tempest/init.yml
index 0faa34e..bb9b7a0 100644
--- a/metadata/service/tempest/init.yml
+++ b/metadata/service/tempest/init.yml
@@ -28,6 +28,22 @@
     runtest_tempest_regenerate_conf: false
     runtest_tempest_public_net: public
     runtest_tempest_use_dynamic_credentials: true
+  # This file will be last include, add pillar directly to avoid
+  # variable override
+  keystone:
+    client:
+      enabled: true
+      server:
+        admin_identity:
+          admin:
+            user: admin
+            password: ${_param:keystone_admin_password}
+            project: admin
+            host: ${_param:keystone_service_host}
+            port: 5000
+            region_name: ${_param:openstack_region}
+            use_keystoneauth: true
+            protocol: ${_param:keystone_service_protocol}
   runtest:
     enabled: true
     openstack_version: stable/${_param:openstack_version}