diff --git a/horizon/values.yaml b/horizon/values.yaml
index 8ff15547d3..78eb30ffd7 100644
--- a/horizon/values.yaml
+++ b/horizon/values.yaml
@@ -288,10 +288,9 @@ conf:
         #    ('http://cluster2.example.com:5000/v2.0', 'cluster2'),
         #]
 
-        OPENSTACK_KEYSTONE_URL = "{{ tuple "identity" "public" "api" . | include "helm-toolkit.endpoints.keystone_endpoint_uri_lookup" }}"
+        OPENSTACK_KEYSTONE_URL = "{{ tuple "identity" "internal" "api" . | include "helm-toolkit.endpoints.keystone_endpoint_uri_lookup" }}"
         OPENSTACK_KEYSTONE_DEFAULT_ROLE = "member"
 
-
         {{- if .Values.conf.horizon.local_settings.config.auth.sso.enabled }}
         # Enables keystone web single-sign-on if set to True.
         WEBSSO_ENABLED = True
@@ -444,7 +443,7 @@ conf:
         # OPENSTACK_ENDPOINT_TYPE specifies the endpoint type to use for the endpoints
         # in the Keystone service catalog. Use this setting when Horizon is running
         # external to the OpenStack environment. The default is 'publicURL'.
-        OPENSTACK_ENDPOINT_TYPE = "publicURL"
+        OPENSTACK_ENDPOINT_TYPE = "internalURL"
 
         # SECONDARY_ENDPOINT_TYPE specifies the fallback endpoint type to use in the
         # case that OPENSTACK_ENDPOINT_TYPE is not present in the endpoints