diff --git a/puppet/services/pacemaker.yaml b/puppet/services/pacemaker.yaml
index a96fdeae61..42ad224301 100644
--- a/puppet/services/pacemaker.yaml
+++ b/puppet/services/pacemaker.yaml
@@ -45,12 +45,10 @@ parameters:
     type: string
     description: The authkey for the pacemaker remote service.
     hidden: true
-    default: ''
   PcsdPassword:
     type: string
     description: The password for the 'pcsd' user for pacemaker.
     hidden: true
-    default: ''
   CorosyncSettleTries:
     type: number
     description: Number of tries for cluster settling. This has the
diff --git a/puppet/services/pacemaker_remote.yaml b/puppet/services/pacemaker_remote.yaml
index 79e43816a3..f939a3f22f 100644
--- a/puppet/services/pacemaker_remote.yaml
+++ b/puppet/services/pacemaker_remote.yaml
@@ -34,12 +34,10 @@ parameters:
     type: string
     description: The authkey for the pacemaker remote service.
     hidden: true
-    default: ''
   PcsdPassword:
     type: string
     description: The password for the 'pcsd' user for pacemaker.
     hidden: true
-    default: ''
   MonitoringSubscriptionPacemakerRemote:
     default: 'overcloud-pacemaker_remote'
     type: string
diff --git a/releasenotes/notes/remove-pacemaker-passwords-default-values-dd0cfdf7922ecf90.yaml b/releasenotes/notes/remove-pacemaker-passwords-default-values-dd0cfdf7922ecf90.yaml
new file mode 100644
index 0000000000..8b76b6e111
--- /dev/null
+++ b/releasenotes/notes/remove-pacemaker-passwords-default-values-dd0cfdf7922ecf90.yaml
@@ -0,0 +1,7 @@
+---
+fixes:
+  - The default values for the PcsdPassword and PacemakerRemoteAuthkey
+    parameters have been removed, as they did not result in a functioning
+    pacemaker installation. These values are instead generated by
+    tripleo-common, and in the cases where they are not (direct API), we want
+    to fail explicitly if they are not provided.