diff --git a/devstack/lib/common b/devstack/lib/common
index 3d695a8d..94f0c21b 100644
--- a/devstack/lib/common
+++ b/devstack/lib/common
@@ -52,7 +52,7 @@ function proxy_pass_to_kubernetes {
 	local ip=$(get_kubernetes_service_ip $svc)
 	local apache_conf=$(apache_site_config_for $conf)
 
-	echo "ProxyPass \"${url}\" \"http://${ip}/\"" | sudo tee -a $apache_conf
+	echo "ProxyPass \"${url}\" \"http://${ip}/\"" | sudo tee $apache_conf
 
 	enable_apache_site $conf
 	restart_apache_server
diff --git a/devstack/lib/keystone b/devstack/lib/keystone
index f4fa2bc6..c40f4307 100644
--- a/devstack/lib/keystone
+++ b/devstack/lib/keystone
@@ -65,7 +65,8 @@ function start_keystone {
 		service_port=$KEYSTONE_SERVICE_PORT_INT
 		auth_protocol="http"
 	fi
-	proxy_pass_to_kubernetes /identity keystone keystone-devstack
+	proxy_pass_to_kubernetes /identity_admin keystone keystone-wsgi-admin
+	proxy_pass_to_kubernetes /identity keystone keystone-wsgi-public
 
 	echo "Waiting for keystone to start..."
 	# Check that the keystone service is running. Even if the tls tunnel