diff --git a/lib/puppet/provider/neutron.rb b/lib/puppet/provider/neutron.rb
index 8de181b2f..27ee6dfb3 100644
--- a/lib/puppet/provider/neutron.rb
+++ b/lib/puppet/provider/neutron.rb
@@ -23,6 +23,7 @@ class Puppet::Provider::Neutron < Puppet::Provider::Openstack
   end
 
   def self.neutron_request(service, action, error, properties=nil)
+    warning('Usage of keystone_authtoken parameters is deprecated.')
     properties ||= []
     @credentials.username = neutron_credentials['username']
     @credentials.password = neutron_credentials['password']
diff --git a/releasenotes/notes/provider-deprecate-at-params-d688fca46bafe562.yaml b/releasenotes/notes/provider-deprecate-at-params-d688fca46bafe562.yaml
new file mode 100644
index 000000000..f14a1b712
--- /dev/null
+++ b/releasenotes/notes/provider-deprecate-at-params-d688fca46bafe562.yaml
@@ -0,0 +1,16 @@
+---
+deprecations:
+  - |
+    The following resource types have been using the credential written in
+    the ``[keystone_authtoken]`` section of ``neutron.conf``. However this
+    behavior has been deprecated and now these resource types first look for
+    the yaml files in ``/etc/openstack/puppet``. Make sure one of
+    ``clouds.yaml`` or ``admin-clouds.yaml`` (which is created by
+    puppet-keystone) is created in that directory.
+
+    - ``neutron_network``
+    - ``neutron_subnet``
+    - ``neutron_port``
+    - ``neutron_router``
+    - ``neutron_router_interface``
+    - ``neutron_security_group``