diff --git a/keystone/client/service/contrail.yml b/keystone/client/service/contrail.yml
new file mode 100644
index 0000000..91c925e
--- /dev/null
+++ b/keystone/client/service/contrail.yml
@@ -0,0 +1,28 @@
+classes:
+- system.keystone.client.v3.service.contrail
+parameters:
+  _param:
+    cluster_public_protocol: https
+    contrail_service_protocol: http
+  keystone:
+    client:
+      server:
+        identity:
+          service:
+            opencontrail:
+              type: contrail
+              description: OpenContrail API
+              endpoints:
+              - region: ${_param:openstack_region}
+                public_protocol: ${_param:cluster_public_protocol}
+                public_address: ${_param:cluster_public_host}
+                public_port: 8082
+                public_path: ''
+                internal_protocol: ${_param:contrail_service_protocol}
+                internal_address: ${_param:opencontrail_control_address}
+                internal_port: 8082
+                internal_path: ''
+                admin_protocol: ${_param:contrail_service_protocol}
+                admin_address: ${_param:opencontrail_control_address}
+                admin_port: 8082
+                admin_path: ''
\ No newline at end of file
diff --git a/keystone/client/v3/service/contrail.yml b/keystone/client/v3/service/contrail.yml
new file mode 100644
index 0000000..a43f222
--- /dev/null
+++ b/keystone/client/v3/service/contrail.yml
@@ -0,0 +1,24 @@
+parameters:
+  _param:
+    cluster_public_protocol: https
+    contrail_service_protocol: http
+  keystone:
+    client:
+      resources:
+        v3:
+          opencontrail:
+            type: contrail
+            description: OpenContrail API
+            endpoints:
+              contrail_public:
+                interface: 'public'
+                url: ${_param:cluster_public_protocol}://${_param:cluster_public_host}:8082
+                region: ${_param:openstack_region}
+              contrail_internal:
+                interface: 'internal'
+                url: ${_param:contrail_service_protocol}://${_param:opencontrail_control_address}:8082
+                region: ${_param:openstack_region}
+              contrail_admin:
+                interface: 'admin'
+                url: ${_param:contrail_service_protocol}://${_param:opencontrail_control_address}:8082
+                region: ${_param:openstack_region}