diff --git a/docker/cinder/start.sh b/docker/cinder/start.sh
index 84b79e50116a223ec5b3d8cfd9bd567e2404db2f..12dcf3dc175fa1e5b2435edd87749d7ba9c046ee 100755
--- a/docker/cinder/start.sh
+++ b/docker/cinder/start.sh
@@ -143,7 +143,7 @@ crudini --set /etc/cinder/cinder.conf \
 
 
 export SERVICE_TOKEN="${KEYSTONE_ADMIN_TOKEN}"
-export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONEMASTER_35357_PORT_35357_TCP_ADDR}:35357/v2.0"
+export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONE_ADMIN_PORT_35357_TCP_ADDR}:35357/v2.0"
 
 /bin/keystone user-create --name ${CINDER_KEYSTONE_USER} --pass ${CINDER_ADMIN_PASSWORD}
 /bin/keystone role-create --name ${CINDER_KEYSTONE_USER}
diff --git a/docker/glance/glance-base/config-glance.sh b/docker/glance/glance-base/config-glance.sh
index 6cdd76efd0acf41b15b3159f5d0fa7af38783dee..494d49704edc4ca30f92600f837f2ca957b86608 100644
--- a/docker/glance/glance-base/config-glance.sh
+++ b/docker/glance/glance-base/config-glance.sh
@@ -33,7 +33,7 @@ done
 crudini --set $cfg
         keystone_authtoken \
         auth_uri \
-        "${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONEMASTER_5000_PORT_5000_TCP_ADDR}:5000/"
+        "${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONE_PUBLIC_PORT_5000_TCP_ADDR}:5000/"
 crudini --set $cfg
         keystone_authtoken \
         admin_tenant_name \
diff --git a/docker/glance/glance-registry/start.sh b/docker/glance/glance-registry/start.sh
index c169087a9cb894e2e79abc9562da6c9d47ca0b40..2356620d9dff104ea04b6c0b71ef4fc0faabb1ff 100755
--- a/docker/glance/glance-registry/start.sh
+++ b/docker/glance/glance-registry/start.sh
@@ -33,7 +33,7 @@ EOF
 /usr/bin/glance-manage db_sync
 
 export SERVICE_TOKEN="${KEYSTONE_ADMIN_TOKEN}"
-export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONEMASTER_35357_PORT_35357_TCP_ADDR}:35357/v2.0"
+export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONE_ADMIN_PORT_35357_TCP_ADDR}:35357/v2.0"
 
 /usr/bin/keystone user-create --name ${GLANCE_KEYSTONE_USER} --pass ${GLANCE_KEYSTONE_PASS}
 /usr/bin/keystone user-role-add --user ${GLANCE_KEYSTONE_USER} --role admin --tenant ${GLANCE_TENANT_NAME}
diff --git a/docker/heat/heat-engine/start.sh b/docker/heat/heat-engine/start.sh
index 35df8f04ae62366791aed640048f7ad6fcd6c0f6..306cbbacef450968bcb0ebcffc3ece364af44d1f 100644
--- a/docker/heat/heat-engine/start.sh
+++ b/docker/heat/heat-engine/start.sh
@@ -31,7 +31,7 @@ GRANT ALL PRIVILEGES ON heat* TO
 EOF
 
 export SERVICE_TOKEN="${KEYSTONE_ADMIN_TOKEN}"
-export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONEMASTER_35357_PORT_35357_TCP_ADDR}:35357/v2.0"
+export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONE_ADMIN_PORT_35357_TCP_ADDR}:35357/v2.0"
 
 /bin/keystone user-create --name ${GLANCE_KEYSTONE_USER} --pass ${GLANCE_ADMIN_PASSWORD}
 /bin/keystone role-create --name ${GLANCE_KEYSTONE_USER}
diff --git a/docker/keystone/keystone-service-35357.json b/docker/keystone/keystone-admin-service.json
similarity index 64%
rename from docker/keystone/keystone-service-35357.json
rename to docker/keystone/keystone-admin-service.json
index a78ba8fb3d0c851a543f94aa5ed349131a10544d..c67d585538cd772503781a90cd9eb2f1ac7cc13f 100644
--- a/docker/keystone/keystone-service-35357.json
+++ b/docker/keystone/keystone-admin-service.json
@@ -1,10 +1,10 @@
 {
-  "id": "keystonemaster-35357",
+  "id": "keystone-admin",
   "kind": "Service",
   "apiVersion": "v1beta1",
   "port": 35357,
   "containerPort": 35357,
   "selector": {
-    "name": "keystone-master"
+    "name": "keystone"
   }
 }
diff --git a/docker/keystone/keystone-service-5000.json b/docker/keystone/keystone-public-service.json
similarity index 64%
rename from docker/keystone/keystone-service-5000.json
rename to docker/keystone/keystone-public-service.json
index d908bcca9b7737fea82638f18aeb2cb1eba2d9b9..6768fe9e054bc0d14d95dafcd3d7d785e6d0bd11 100644
--- a/docker/keystone/keystone-service-5000.json
+++ b/docker/keystone/keystone-public-service.json
@@ -1,10 +1,10 @@
 {
-  "id": "keystonemaster-5000",
+  "id": "keystone-public",
   "kind": "Service",
   "apiVersion": "v1beta1",
   "port": 5000,
   "containerPort": 5000,
   "selector": {
-    "name": "keystone-master"
+    "name": "keystone"
   }
 }
diff --git a/docker/keystone/keystone.json b/docker/keystone/keystone.json
index 024cc4022df46ceb5b3363331874fe7b83dd0e94..4a1edf0db88b988db660e0ff1547c52530db8ace 100644
--- a/docker/keystone/keystone.json
+++ b/docker/keystone/keystone.json
@@ -19,6 +19,6 @@
     }
   },
   "labels": {
-    "name": "keystone-master"
+    "name": "keystone"
   }
 }
diff --git a/docker/keystone/start.sh b/docker/keystone/start.sh
index a825c39d8dc46e40aaa6d761012429ab1b1d8b81..b006676911718b2f9dddbd5e1d9026c8381c32cf 100755
--- a/docker/keystone/start.sh
+++ b/docker/keystone/start.sh
@@ -45,11 +45,11 @@ cat /etc/keystone/keystone.conf
 
 MY_IP=$(ip route get $(ip route | awk '$1 == "default" {print $3}') |
     awk '$4 == "src" {print $5}')
-if [ -z "$KEYSTONEMASTER_35357_PORT_35357_TCP_ADDR" ]; then
-    KEYSTONEMASTER_35357_PORT_35357_TCP_ADDR=$MY_IP
+if [ -z "$KEYSTONE_ADMIN_PORT_35357_TCP_ADDR" ]; then
+    KEYSTONE_ADMIN_PORT_35357_TCP_ADDR=$MY_IP
 fi
-if [ -z "$KEYSTONEMASTER_5000_PORT_5000_TCP_ADDR" ]; then
-    KEYSTONEMASTER_5000_PORT_5000_TCP_ADDR=$MY_IP
+if [ -z "$KEYSTONE_PUBLIC_PORT_5000_TCP_ADDR" ]; then
+    KEYSTONE_PUBLIC_PORT_5000_TCP_ADDR=$MY_IP
 fi
 
 /usr/bin/keystone-all &
@@ -57,8 +57,8 @@ PID=$!
 
 export SERVICE_TOKEN="${KEYSTONE_ADMIN_TOKEN}"
 export SERVICE_ENDPOINT="http://127.0.0.1:35357/v2.0"
-SERVICE_ENDPOINT_ADMIN="http://${KEYSTONEMASTER_35357_PORT_35357_TCP_ADDR}:35357/v2.0"
-SERVICE_ENDPOINT_USER="http://${KEYSTONEMASTER_5000_PORT_5000_TCP_ADDR}:5000/v2.0"
+SERVICE_ENDPOINT_ADMIN="http://${KEYSTONE_ADMIN_PORT_35357_TCP_ADDR}:35357/v2.0"
+SERVICE_ENDPOINT_USER="http://${KEYSTONE_PUBLIC_PORT_5000_TCP_ADDR}:5000/v2.0"
 
 # wait for keystone to become active
 while ! curl -o /dev/null -s --fail ${SERVICE_ENDPOINT}; do
diff --git a/docker/nova-compute/nova-compute/start.sh b/docker/nova-compute/nova-compute/start.sh
index ed6631cfcd2c5bd9bedbcd0dc7295933d2dc90fc..45a17bc4e44cb4d46c15994ab7a15ae31ff29089 100644
--- a/docker/nova-compute/nova-compute/start.sh
+++ b/docker/nova-compute/nova-compute/start.sh
@@ -31,7 +31,7 @@ GRANT ALL PRIVILEGES ON nova* TO
 EOF
 
 export SERVICE_TOKEN="${KEYSTONE_ADMIN_TOKEN}"
-export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONEMASTER_35357_PORT_35357_TCP_ADDR}:35357/v2.0"
+export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONE_ADMIN_PORT_35357_TCP_ADDR}:35357/v2.0"
 
 /usr/bin/keystone user-create --name ${NOVA_KEYSTONE_USER} --pass ${NOVA_ADMIN_PASSWORD}
 /usr/bin/keystone role-create --name ${NOVA_KEYSTONE_USER}
diff --git a/docker/swift/swift-account/start.sh b/docker/swift/swift-account/start.sh
index 29269d5774875a4f26a34d93c794fe2f7bd60ee8..562fd4ca420c59ab6b94e6f88e52d3924728a97f 100644
--- a/docker/swift/swift-account/start.sh
+++ b/docker/swift/swift-account/start.sh
@@ -31,7 +31,7 @@ GRANT ALL PRIVILEGES ON swift* TO
 EOF
 
 export SERVICE_TOKEN="${KEYSTONE_ADMIN_TOKEN}"
-export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONEMASTER_35357_PORT_35357_TCP_ADDR}:35357/v2.0"
+export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONE_ADMIN_PORT_35357_TCP_ADDR}:35357/v2.0"
 
 /bin/keystone user-create --name ${SWIFT_KEYSTONE_USER} --pass ${SWIFT_ADMIN_PASSWORD}
 /bin/keystone role-create --name ${SWIFT_KEYSTONE_USER}
diff --git a/docker/swift/swift-container/start.sh b/docker/swift/swift-container/start.sh
index aa22739b7dc434ee4ba52900ac4f77d7a0383af4..e96471fb739a590b331ad943385b36f389eb5c98 100644
--- a/docker/swift/swift-container/start.sh
+++ b/docker/swift/swift-container/start.sh
@@ -31,7 +31,7 @@ GRANT ALL PRIVILEGES ON swift* TO
 EOF
 
 export SERVICE_TOKEN="${KEYSTONE_ADMIN_TOKEN}"
-export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONEMASTER_35357_PORT_35357_TCP_ADDR}:35357/v2.0"
+export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONE_ADMIN_PORT_35357_TCP_ADDR}:35357/v2.0"
 
 /bin/keystone user-create --name ${SWIFT_KEYSTONE_USER} --pass ${SWIFT_ADMIN_PASSWORD}
 /bin/keystone role-create --name ${SWIFT_KEYSTONE_USER}
diff --git a/docker/swift/swift-object/start.sh b/docker/swift/swift-object/start.sh
index 4f0a8febfa2ae4dfd81af094d4389625b741d5dc..1546d8271a4d4bc95bdace38dbe1190329e503e4 100644
--- a/docker/swift/swift-object/start.sh
+++ b/docker/swift/swift-object/start.sh
@@ -31,7 +31,7 @@ GRANT ALL PRIVILEGES ON swift* TO
 EOF
 
 export SERVICE_TOKEN="${KEYSTONE_ADMIN_TOKEN}"
-export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONEMASTER_35357_PORT_35357_TCP_ADDR}:35357/v2.0"
+export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONE_ADMIN_PORT_35357_TCP_ADDR}:35357/v2.0"
 
 /bin/keystone user-create --name ${SWIFT_KEYSTONE_USER} --pass ${SWIFT_ADMIN_PASSWORD}
 /bin/keystone role-create --name ${SWIFT_KEYSTONE_USER}