diff --git a/deployment/barbican/barbican-client-puppet.yaml b/deployment/barbican/barbican-client-puppet.yaml
index d2925fa118..a377a9cb0f 100644
--- a/deployment/barbican/barbican-client-puppet.yaml
+++ b/deployment/barbican/barbican-client-puppet.yaml
@@ -27,6 +27,10 @@ parameters:
     default: {}
     description: Parameters specific to the role
     type: json
+  KeystoneRegion:
+    type: string
+    default: 'regionOne'
+    description: Keystone region for endpoint
 
 outputs:
   role_data:
@@ -49,9 +53,11 @@ outputs:
         cinder_volume: *cinder_barbican_config
         cinder_backup: *cinder_barbican_config
         glance_api: &glance_barbican_config
-          glance::api::keymgr_backend: barbican
-          glance::api::keymgr_encryption_api_url:
+          glance::key_manager::backend: barbican
+          glance::key_manager::barbican::barbican_endpoint:
             get_param: [EndpointMap, BarbicanInternal, uri]
-          glance::api::keymgr_encryption_auth_url:
+          glance::key_manager::barbican::auth_endpoint:
             get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]
+          glance::key_manager::barbican::barbican_region_name:
+            get_param: KeystoneRegion
         glance_api_edge: *glance_barbican_config