diff --git a/deployment/keystone/keystone-container-puppet.yaml b/deployment/keystone/keystone-container-puppet.yaml
index a7cf78036a..8aeac3306b 100644
--- a/deployment/keystone/keystone-container-puppet.yaml
+++ b/deployment/keystone/keystone-container-puppet.yaml
@@ -657,15 +657,11 @@ outputs:
             start_order: 3
             action: exec
             user: root
-            # NOTE(mwhahaha): We use $$ because we're executing in python to
-            # call as shell script and passing the command to run as arguments
-            # to that shell script. So when it is called via eval, the escaped
-            # $ properly evaulates
             command:
-              [ 'keystone', '/usr/bin/bootstrap_host_exec', 'keystone' ,'keystone-manage', 'bootstrap', '--bootstrap-password', '$$KEYSTONE_BOOTSTRAP_PASSWORD' ]
+              [ 'keystone', '/usr/bin/bootstrap_host_exec', 'keystone' ,'keystone-manage', 'bootstrap' ]
             environment:
               KOLLA_BOOTSTRAP: true
-              KEYSTONE_BOOTSTRAP_PASSWORD: {get_param: AdminPassword}
+              OS_BOOTSTRAP_PASSWORD: {get_param: AdminPassword}
         step_4:
           # There are cases where we need to refresh keystone after the resource provisioning,
           # such as the case of using LDAP backends for domains. So we trigger a graceful