diff --git a/hooks/keystone_utils.py b/hooks/keystone_utils.py
index b469fafc..6e58e8d4 100644
--- a/hooks/keystone_utils.py
+++ b/hooks/keystone_utils.py
@@ -1852,11 +1852,19 @@ def add_service_to_keystone(relation_id=None, remote_unit=None):
             # Check if clustered and use vip + haproxy ports if so
             relation_data["auth_host"] = resolve_address(ADMIN)
             relation_data["service_host"] = resolve_address(PUBLIC)
+            relation_data["internal_host"] = resolve_address(INTERNAL)
 
             relation_data["auth_protocol"] = protocol
             relation_data["service_protocol"] = protocol
+            relation_data["internal_protocol"] = protocol
+
             relation_data["auth_port"] = config('admin-port')
             relation_data["service_port"] = config('service-port')
+            # the internal url is binded to the service-port when
+            # bootstrapping keystone in the function bootstrap_keystone(), the
+            # same config is handed over in the relation.
+            relation_data["internal_port"] = config('service-port')
+
             relation_data["region"] = config('region')
             relation_data["api_version"] = get_api_version()
             relation_data["admin_domain_id"] = leader_get(
@@ -1967,7 +1975,9 @@ def add_service_to_keystone(relation_id=None, remote_unit=None):
     relation_data = {
         "auth_host": resolve_address(ADMIN),
         "service_host": resolve_address(PUBLIC),
+        "internal_host": resolve_address(INTERNAL),
         "service_port": config("service-port"),
+        "internal_port": config("service-port"),
         "auth_port": config("admin-port"),
         "service_username": service_username,
         "service_password": service_password,
@@ -1981,6 +1991,7 @@ def add_service_to_keystone(relation_id=None, remote_unit=None):
         "ca_cert": '__null__',
         "auth_protocol": protocol,
         "service_protocol": protocol,
+        "internal_protocol": protocol,
         "api_version": get_api_version(),
         "admin_domain_id": leader_get(attribute='admin_domain_id'),
         "admin_project_id": admin_project_id,
diff --git a/unit_tests/test_keystone_utils.py b/unit_tests/test_keystone_utils.py
index 95582003..1baa2972 100644
--- a/unit_tests/test_keystone_utils.py
+++ b/unit_tests/test_keystone_utils.py
@@ -359,6 +359,9 @@ class TestKeystoneUtils(CharmTestCase):
                          'auth_port': 80,
                          'auth_protocol': 'https',
                          'service_port': 81,
+                         'internal_host': '10.10.10.10',
+                         'internal_protocol': 'https',
+                         'internal_port': 81,
                          'region': 'RegionOne',
                          'api_version': 2,
                          'admin_domain_id': None,
@@ -447,6 +450,9 @@ class TestKeystoneUtils(CharmTestCase):
                          'auth_host': '10.0.0.3',
                          'service_host': '10.0.0.3',
                          'service_port': 81, 'auth_port': 80,
+                         'internal_host': '10.0.0.3',
+                         'internal_protocol': 'http',
+                         'internal_port': 81,
                          'service_username': 'keystone',
                          'service_password': 'password',
                          'service_domain': service_domain,