diff --git a/deployment/nova/nova-consoleauth-container-puppet.yaml b/deployment/deprecated/nova/nova-consoleauth-container-puppet.yaml
similarity index 97%
rename from deployment/nova/nova-consoleauth-container-puppet.yaml
rename to deployment/deprecated/nova/nova-consoleauth-container-puppet.yaml
index cc8474e376..6667ad104a 100644
--- a/deployment/nova/nova-consoleauth-container-puppet.yaml
+++ b/deployment/deprecated/nova/nova-consoleauth-container-puppet.yaml
@@ -52,10 +52,10 @@ parameters:
 resources:
 
   ContainersCommon:
-    type: ../../docker/services/containers-common.yaml
+    type: ../../../docker/services/containers-common.yaml
 
   MySQLClient:
-    type: ../../deployment/database/mysql-client.yaml
+    type: ../../../deployment/database/mysql-client.yaml
 
   NovaLogging:
     type: OS::TripleO::Services::Logging::NovaCommon
@@ -64,7 +64,7 @@ resources:
       NovaServiceName: 'consoleauth'
 
   NovaBase:
-    type: ./nova-base-puppet.yaml
+    type: ../../nova/nova-base-puppet.yaml
     properties:
       ServiceData: {get_param: ServiceData}
       ServiceNetMap: {get_param: ServiceNetMap}
diff --git a/overcloud-resource-registry-puppet.j2.yaml b/overcloud-resource-registry-puppet.j2.yaml
index 58549e1300..75727e1e55 100644
--- a/overcloud-resource-registry-puppet.j2.yaml
+++ b/overcloud-resource-registry-puppet.j2.yaml
@@ -192,7 +192,7 @@ resource_registry:
   OS::TripleO::Services::NovaApi: deployment/nova/nova-api-container-puppet.yaml
   OS::TripleO::Services::NovaCompute: deployment/nova/nova-compute-container-puppet.yaml
   OS::TripleO::Services::NovaConductor: deployment/nova/nova-conductor-container-puppet.yaml
-  OS::TripleO::Services::NovaConsoleauth: deployment/nova/nova-consoleauth-container-puppet.yaml
+  OS::TripleO::Services::NovaConsoleauth: deployment/deprecated/nova/nova-consoleauth-container-puppet.yaml
   OS::TripleO::Services::NovaLibvirt: deployment/nova/nova-libvirt-container-puppet.yaml
   OS::TripleO::Services::NovaLibvirtGuests: deployment/nova/nova-libvirt-guests-container-puppet.yaml
   OS::TripleO::Services::NovaMetadata: deployment/nova/nova-metadata-container-puppet.yaml
diff --git a/releasenotes/notes/nova_deprecate_consoleauth-ffb93ffa5393b630.yaml b/releasenotes/notes/nova_deprecate_consoleauth-ffb93ffa5393b630.yaml
new file mode 100644
index 0000000000..6441d0e7f1
--- /dev/null
+++ b/releasenotes/notes/nova_deprecate_consoleauth-ffb93ffa5393b630.yaml
@@ -0,0 +1,13 @@
+---
+deprecations:
+  - |
+    As of Rocky [1], the nova-consoleauth service has been deprecated and
+    cell databases are used for storing token authorizations. All new consoles
+    will be supported by the database backend and existing consoles will be
+    reset. Console proxies must be run per cell because the new console token
+    authorizations are stored in cell databases.
+
+    Lets deprecate it also in tripleo so that it can be removed in a later
+    release.
+
+    [1] https://docs.openstack.org/releasenotes/nova/rocky.html