diff --git a/tools/openrc-example b/tools/openrc-example
index 66b2fb7ba1..fec34259a9 100644
--- a/tools/openrc-example
+++ b/tools/openrc-example
@@ -9,3 +9,41 @@ export OS_PROJECT_NAME=admin
 export OS_USERNAME=admin
 export OS_PASSWORD=<keystone_admin_password>
 export OS_AUTH_URL=http://<kolla_internal_fqdn>:<keystone_admin_port>
+export OS_IDENTITY_API_VERSION=3
+
+
+# If you want to connect to the public endpoints of OpenStack
+# you can create an openrc by replacing these variables.  You
+# can also replace the admin username and password with those
+# of another user.
+#           keystone_admin_password
+#           kolla_external_fqdn
+#           keystone_public_port
+
+export OS_PROJECT_DOMAIN_ID=default
+export OS_USER_DOMAIN_ID=default
+export OS_PROJECT_NAME=admin
+export OS_USERNAME=admin
+export OS_PASSWORD=<keystone_admin_password>
+export OS_AUTH_URL=http://<kolla_external_fqdn>:<keystone_public_port>
+export OS_IDENTITY_API_VERSION=3
+
+
+# When you have enabled TLS on the external network of kolla,
+# if you want to connect to the public endpoints of OpenStack
+# you can create an openrc by replacing these variables.  You
+# can also replace the admin username and password with those
+# of another user.
+#           keystone_admin_password
+#           kolla_external_fqdn
+#           keystone_public_port
+#           path_to_kolla_external_cacert
+
+export OS_PROJECT_DOMAIN_ID=default
+export OS_USER_DOMAIN_ID=default
+export OS_PROJECT_NAME=admin
+export OS_USERNAME=admin
+export OS_PASSWORD=<keystone_admin_password>
+export OS_AUTH_URL=http://<kolla_external_fqdn>:<keystone_public_port>
+export OS_CACERT=<path_to_kolla_external_cacert>
+export OS_IDENTITY_API_VERSION=3