diff --git a/lib/puppet/provider/glance.rb b/lib/puppet/provider/glance.rb
index 60ff0c06..8e87cd0a 100644
--- a/lib/puppet/provider/glance.rb
+++ b/lib/puppet/provider/glance.rb
@@ -18,6 +18,7 @@ class Puppet::Provider::Glance < Puppet::Provider::Openstack
   end
 
   def self.glance_request(service, action, error, properties=nil)
+    warning('Usage of keystone_authtoken parameters is deprecated.')
     properties ||= []
     @credentials.username = glance_credentials['username']
     @credentials.password = glance_credentials['password']
diff --git a/releasenotes/notes/provider-deprecate-at-params-88b2ee3f16ac5443.yaml b/releasenotes/notes/provider-deprecate-at-params-88b2ee3f16ac5443.yaml
new file mode 100644
index 00000000..59cc2d40
--- /dev/null
+++ b/releasenotes/notes/provider-deprecate-at-params-88b2ee3f16ac5443.yaml
@@ -0,0 +1,9 @@
+---
+deprecations:
+  - |
+    The ``glance_image`` resource type has been using the credential written in
+    the ``[keystone_authtoken]`` section of ``glance-api.conf``. However this
+    behavior has been deprecated and now the resource type first looks for
+    the yaml files in ``/etc/openstack/puppet``. Make sure one of
+    ``clouds.yaml`` or ``admin-clouds.yaml`` (which is created by
+    puppet-keystone) is created in that directory.