diff --git a/ansible/roles/ironic/templates/ironic.conf.j2 b/ansible/roles/ironic/templates/ironic.conf.j2
index ca2fcc428f..30f5d52980 100644
--- a/ansible/roles/ironic/templates/ironic.conf.j2
+++ b/ansible/roles/ironic/templates/ironic.conf.j2
@@ -44,7 +44,6 @@ api_workers = {{ openstack_service_workers }}
 
 {% if service_name == 'ironic-conductor' %}
 [conductor]
-api_url = {{ internal_protocol }}://{{ ironic_internal_fqdn }}:{{ ironic_api_port }}
 automated_clean=false
 {% endif %}
 
@@ -62,6 +61,8 @@ user_domain_id = {{ default_user_domain_id }}
 project_name = service
 username = {{ ironic_keystone_user }}
 password = {{ ironic_keystone_password }}
+region_name = {{ openstack_region_name }}
+valid_interfaces = internal
 
 memcache_security_strategy = ENCRYPT
 memcache_secret_key = {{ memcache_secret_key }}
@@ -77,11 +78,12 @@ user_domain_id = default
 project_name = service
 username = {{ ironic_keystone_user }}
 password = {{ ironic_keystone_password }}
+region_name = {{ openstack_region_name }}
+valid_interfaces = internal
 {% endif %}
 
 {% if enable_glance | bool %}
 [glance]
-glance_api_servers = {{ internal_protocol }}://{{ glance_internal_fqdn }}:{{ glance_api_port }}
 auth_url = {{ keystone_admin_url }}
 auth_type = password
 project_domain_id = default
@@ -89,11 +91,12 @@ user_domain_id = default
 project_name = service
 username = {{ ironic_keystone_user }}
 password = {{ ironic_keystone_password }}
+region_name = {{ openstack_region_name }}
+valid_interfaces = internal
 {% endif %}
 
 {% if enable_neutron | bool %}
 [neutron]
-url = {{ internal_protocol }}://{{ neutron_internal_fqdn }}:{{ neutron_server_port }}
 auth_url = {{ keystone_admin_url }}
 auth_type = password
 project_domain_id = default
@@ -101,11 +104,12 @@ user_domain_id = default
 project_name = service
 username = {{ ironic_keystone_user }}
 password = {{ ironic_keystone_password }}
+region_name = {{ openstack_region_name }}
+valid_interfaces = internal
 cleaning_network = {{ ironic_cleaning_network }}
 {% endif %}
 
 [inspector]
-enabled = true
 {% if enable_keystone | bool %}
 auth_url = {{ keystone_admin_url }}
 auth_type = password
@@ -114,10 +118,28 @@ user_domain_id = default
 project_name = service
 username = {{ ironic_keystone_user }}
 password = {{ ironic_keystone_password }}
+region_name = {{ openstack_region_name }}
+valid_interfaces = internal
 {% else %}
-auth_type=none
-{% endif %}
+auth_type = none
 endpoint_override = {{ ironic_inspector_internal_endpoint }}
+{% endif %}
+
+[service_catalog]
+{% if enable_keystone | bool %}
+auth_url = {{ keystone_admin_url }}
+auth_type = password
+project_domain_id = default
+user_domain_id = default
+project_name = service
+username = {{ ironic_keystone_user }}
+password = {{ ironic_keystone_password }}
+region_name = {{ openstack_region_name }}
+valid_interfaces = internal
+{% else %}
+auth_type = none
+endpoint_override = {{ internal_protocol }}://{{ ironic_internal_fqdn }}:{{ ironic_api_port }}
+{% endif %}
 
 [agent]
 deploy_logs_local_path = /var/log/kolla/ironic