diff --git a/spec/classes/heat_keystone_domain_spec.rb b/spec/classes/heat_keystone_domain_spec.rb
index 907a2b8c..440af032 100644
--- a/spec/classes/heat_keystone_domain_spec.rb
+++ b/spec/classes/heat_keystone_domain_spec.rb
@@ -13,7 +13,7 @@ describe 'heat::keystone::domain' do
   shared_examples_for 'heat keystone domain' do
     it 'configure heat.conf' do
       is_expected.to contain_heat_config('DEFAULT/stack_domain_admin').with_value(params[:domain_admin])
-      is_expected.to contain_heat_config('DEFAULT/stack_domain_admin_password').with_value(params[:domain_password])
+      is_expected.to contain_heat_config('DEFAULT/stack_domain_admin_password').with_value(params[:domain_password]).with_secret(true)
       is_expected.to contain_heat_config('DEFAULT/stack_domain_admin_password').with_secret(true)
       is_expected.to contain_heat_config('DEFAULT/stack_user_domain_name').with_value(params[:domain_name])
     end