diff --git a/deployment/nova/nova-vnc-proxy-container-puppet.yaml b/deployment/nova/nova-vnc-proxy-container-puppet.yaml
index 41d061adba..2d1f9d64fd 100644
--- a/deployment/nova/nova-vnc-proxy-container-puppet.yaml
+++ b/deployment/nova/nova-vnc-proxy-container-puppet.yaml
@@ -20,10 +20,6 @@ parameters:
     description: Mapping of service endpoint -> protocol. Typically set
                  via parameter_defaults in the resource registry.
     type: json
-  AdminPassword:
-    description: The password for the keystone admin account, used for monitoring, querying neutron etc.
-    type: string
-    hidden: true
   ServiceData:
     default: {}
     description: Dictionary packing service data
@@ -91,7 +87,9 @@ parameters:
     constraints:
     - allowed_values: ['', 'UPGRADE']
     default: ''
-
+  RootStackName:
+    description: The name of the stack/plan.
+    type: string
 
 conditions:
 
@@ -372,19 +370,12 @@ outputs:
                 comment: qemu user
       post_upgrade_tasks:
         - when:
-            - step|int == 5
+            - step|int == 4
           tags:
             - never
             - system_upgrade_stop_services
           environment:
-            OS_USERNAME: admin
-            OS_USER_DOMAIN_NAME: "Default"
-            OS_PROJECT_DOMAIN_NAME: "Default"
-            OS_PROJECT_NAME: admin
-            OS_PASSWORD: { get_param: AdminPassword }
-            OS_AUTH_URL: { get_param: [EndpointMap, KeystoneV3Public, uri] }
-            OS_IDENTITY_API_VERSION: 3
-            OS_AUTH_TYPE: password
+            OS_CLOUD: {get_param: RootStackName}
           block:
             - name: Get nova-consoleauth service ID
               command: openstack compute service list --service nova-consoleauth --column ID  --column Host --format yaml