diff --git a/manifests/init.pp b/manifests/init.pp
index f8c4e02e..2fb5e7be 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -40,6 +40,6 @@ class gnocchi (
     manage_config => false,
   }
   gnocchi_config {
-    'DEFAULT/coordination_url' : value => $coordination_url;
+    'DEFAULT/coordination_url' : value => $coordination_url, secret => true;
   }
 }
diff --git a/manifests/storage/incoming/redis.pp b/manifests/storage/incoming/redis.pp
index 74ca1cf4..62058ea2 100644
--- a/manifests/storage/incoming/redis.pp
+++ b/manifests/storage/incoming/redis.pp
@@ -15,8 +15,8 @@ class gnocchi::storage::incoming::redis(
   include gnocchi::deps
 
   gnocchi_config {
-    'incoming/driver':        value => 'redis';
-    'incoming/redis_url':     value => $redis_url;
+    'incoming/driver':    value => 'redis';
+    'incoming/redis_url': value => $redis_url, secret => true;
   }
 
 }
diff --git a/spec/classes/gnocchi_init_spec.rb b/spec/classes/gnocchi_init_spec.rb
index 4c024980..9b0f3905 100644
--- a/spec/classes/gnocchi_init_spec.rb
+++ b/spec/classes/gnocchi_init_spec.rb
@@ -28,7 +28,7 @@ describe 'gnocchi' do
       end
 
       it 'does not configure coordination_url' do
-        is_expected.to contain_gnocchi_config('DEFAULT/coordination_url').with_value('<SERVICE DEFAULT>')
+        is_expected.to contain_gnocchi_config('DEFAULT/coordination_url').with_value('<SERVICE DEFAULT>').with_secret(true)
         is_expected.to contain_oslo__coordination('gnocchi_config').with(
           :backend_url   => '<SERVICE DEFAULT>',
           :manage_config => false,
@@ -49,7 +49,7 @@ describe 'gnocchi' do
       end
 
       it 'configures coordination' do
-        is_expected.to contain_gnocchi_config('DEFAULT/coordination_url').with_value('redis://localhost:6379')
+        is_expected.to contain_gnocchi_config('DEFAULT/coordination_url').with_value('redis://localhost:6379').with_secret(true)
         is_expected.to contain_oslo__coordination('gnocchi_config').with(
           :backend_url   => 'redis://localhost:6379',
           :manage_config => false,
diff --git a/spec/classes/gnocchi_storage_incoming_redis_spec.rb b/spec/classes/gnocchi_storage_incoming_redis_spec.rb
index 4d9f015a..395cb9cb 100644
--- a/spec/classes/gnocchi_storage_incoming_redis_spec.rb
+++ b/spec/classes/gnocchi_storage_incoming_redis_spec.rb
@@ -17,7 +17,7 @@ describe 'gnocchi::storage::incoming::redis' do
     context 'with redis' do
       it 'configures gnocchi incoming driver with redis' do
         is_expected.to contain_gnocchi_config('incoming/driver').with_value('redis')
-        is_expected.to contain_gnocchi_config('incoming/redis_url').with_value('http://localhost:6378')
+        is_expected.to contain_gnocchi_config('incoming/redis_url').with_value('http://localhost:6378').with_secret(true)
       end
     end
   end