diff --git a/labs/config/credentials b/labs/config/credentials
new file mode 100644
index 00000000..04a9925a
--- /dev/null
+++ b/labs/config/credentials
@@ -0,0 +1,13 @@
+# This file contains user names, passwords, and tokens that are set and used
+# by OpenStack applications and related software running in the VMs.
+
+# Note that the VM shell user and its password are not set here. By default,
+# those are hard-coded in the preseed/kickstart files or in the Vagrant base
+# box. The scripts get the shell user name from deploy.{osbash,vagrant} and
+# don't need a password (they use password-less sudo and -- if configured --
+# ssh keys).
+
+# Used for MySQL or whatever other DBMS is configured
+: ${DATABASE_PASSWORD:=secrete}
+
+# vim: set ai ts=4 sw=4 et ft=sh:
diff --git a/labs/config/openstack b/labs/config/openstack
new file mode 100644
index 00000000..55caddec
--- /dev/null
+++ b/labs/config/openstack
@@ -0,0 +1,12 @@
+# This file contains OpenStack configuration data. It is used by both
+# host (osbash, Windows batch) and VM guest scripts.
+
+# one of: folsom, grizzly, havana, icehouse
+: ${OPENSTACK_RELEASE:=icehouse}
+
+# Networks used by OpenStack training-labs setup
+: ${MGMT_NET:=10.10.10.1}
+: ${DATA_NET:=10.20.20.1}
+: ${API_NET:=192.168.100.1}
+
+# vim: set ai ts=4 sw=4 et ft=sh: