diff --git a/openstack/castellum/Chart.lock b/openstack/castellum/Chart.lock
index 4c98b514ba2..a83f5171a59 100644
--- a/openstack/castellum/Chart.lock
+++ b/openstack/castellum/Chart.lock
@@ -14,5 +14,8 @@ dependencies:
 - name: owner-info
   repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
   version: 1.0.0
-digest: sha256:32cc6301702ed06ba883cace3884453da32e76c9e3a52c426c1809634df7119e
-generated: "2026-08-27T13:28:34.701173947Z"
+- name: utils
+  repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
+  version: 0.38.1
+digest: sha256:a668eeda4371d8407158d14e318390111537373058f4dbfc51fb1c0898093b91
+generated: "2026-08-27T15:30:01.593257716+02:00"
diff --git a/openstack/castellum/Chart.yaml b/openstack/castellum/Chart.yaml
index 3a5525aeb1a..787b292b8c6 100644
--- a/openstack/castellum/Chart.yaml
+++ b/openstack/castellum/Chart.yaml
@@ -19,3 +19,6 @@ dependencies:
   - name: owner-info
     repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
     version: '>= 0.0.0'
+  - name: utils
+    repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
+    version: '>= 0.0.0'
diff --git a/openstack/castellum/templates/_utils.tpl b/openstack/castellum/templates/_utils.tpl
index 0d74e903ab5..1777678ab79 100644
--- a/openstack/castellum/templates/_utils.tpl
+++ b/openstack/castellum/templates/_utils.tpl
@@ -60,7 +60,7 @@
   value: /etc/castellum-certs/prometheus-vmware.key.pem
 {{- end }}
 - name: OS_AUTH_URL
-  value: "http://keystone.{{ .Values.global.keystoneNamespace }}.svc.{{ .Values.global.clusterDNSSearchDomain }}:5000/v3"
+  value: "{{.Values.global.keystone_api_endpoint_protocol_internal | default "http"}}://{{include "keystone_api_endpoint_host_internal" .}}:{{ .Values.global.keystone_api_port_internal | default 5000}}/v3"
 - name: OS_AUTH_VERSION
   value: "3"
 - name: OS_IDENTITY_API_VERSION
diff --git a/openstack/keppel/Chart.lock b/openstack/keppel/Chart.lock
index a028576ba4d..c2110063b8a 100644
--- a/openstack/keppel/Chart.lock
+++ b/openstack/keppel/Chart.lock
@@ -20,5 +20,8 @@ dependencies:
 - name: shared-app-images-tags
   repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
   version: 1.1.662
-digest: sha256:5b60a849a6042db00d7fc21cdb7bc56f8b62dc3e2720f8e447d5da4bba90fd9f
-generated: "2026-08-27T13:28:58.004279222Z"
+- name: utils
+  repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
+  version: 0.38.1
+digest: sha256:66ecd12d2bacfe1a0fd605d64a4fd24c4dda57dbd1f0119a407a50d01edc95c4
+generated: "2026-08-27T15:30:03.622118338+02:00"
diff --git a/openstack/keppel/Chart.yaml b/openstack/keppel/Chart.yaml
index 2c41d0fb970..1b8f6f4deec 100644
--- a/openstack/keppel/Chart.yaml
+++ b/openstack/keppel/Chart.yaml
@@ -25,3 +25,6 @@ dependencies:
   - name: shared-app-images-tags
     repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
     version: '>= 0.0.0'
+  - name: utils
+    repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
+    version: '>= 0.0.0'
diff --git a/openstack/keppel/templates/_utils.tpl b/openstack/keppel/templates/_utils.tpl
index d94bdb5b330..6299a3465dd 100644
--- a/openstack/keppel/templates/_utils.tpl
+++ b/openstack/keppel/templates/_utils.tpl
@@ -128,7 +128,7 @@
       name: keppel-secret
       key: trivy_token
 - name:  OS_AUTH_URL
-  value: "http://keystone.{{ $.Values.global.keystoneNamespace }}.svc.{{ $.Values.global.clusterDNSSearchDomain }}:5000/v3"
+  value: "{{.Values.global.keystone_api_endpoint_protocol_internal | default "http"}}://{{include "keystone_api_endpoint_host_internal" .}}:{{ .Values.global.keystone_api_port_internal | default 5000}}/v3"
 - name:  OS_AUTH_VERSION
   value: '3'
 - name:  OS_IDENTITY_API_VERSION
diff --git a/openstack/keppel/templates/deployment-health-monitor.yaml b/openstack/keppel/templates/deployment-health-monitor.yaml
index e1015bbec14..43b84897d86 100644
--- a/openstack/keppel/templates/deployment-health-monitor.yaml
+++ b/openstack/keppel/templates/deployment-health-monitor.yaml
@@ -32,7 +32,7 @@ spec:
             - name:  KEPPEL_DEBUG
               value: 'false'
             - name: OS_AUTH_URL
-              value: "http://keystone.{{ .Values.global.keystoneNamespace }}.svc.{{ .Values.global.clusterDNSSearchDomain }}:5000/v3"
+              value: "{{.Values.global.keystone_api_endpoint_protocol_internal | default "http"}}://{{include "keystone_api_endpoint_host_internal" .}}:{{ .Values.global.keystone_api_port_internal | default 5000}}/v3"
             - name:  OS_AUTH_VERSION
               value: '3'
             - name:  OS_IDENTITY_API_VERSION
diff --git a/openstack/limes-campfire/Chart.lock b/openstack/limes-campfire/Chart.lock
index 5663181a1e0..20568f350ae 100644
--- a/openstack/limes-campfire/Chart.lock
+++ b/openstack/limes-campfire/Chart.lock
@@ -5,5 +5,8 @@ dependencies:
 - name: owner-info
   repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
   version: 1.0.0
-digest: sha256:7b0dbbfbf5e291ac2cfd0ad02125c92f96c4804640ef6e4866cd9375f25d700d
-generated: "2025-08-06T11:47:50.031795043Z"
+- name: utils
+  repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
+  version: 0.38.1
+digest: sha256:7f9f1791a1d6cb57d602f7bd00cf5c062a4fafcc5d168c05f189ffa94711936a
+generated: "2026-08-27T15:30:06.658666213+02:00"
diff --git a/openstack/limes-campfire/Chart.yaml b/openstack/limes-campfire/Chart.yaml
index 747636a1bb5..d91a9986c44 100644
--- a/openstack/limes-campfire/Chart.yaml
+++ b/openstack/limes-campfire/Chart.yaml
@@ -9,3 +9,6 @@ dependencies:
   - name: owner-info
     repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
     version: '>= 0.0.0'
+  - name: utils
+    repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
+    version: '>= 0.0.0'
diff --git a/openstack/limes-campfire/templates/deployment.yaml b/openstack/limes-campfire/templates/deployment.yaml
index 7e44db046fa..c251aec3fff 100644
--- a/openstack/limes-campfire/templates/deployment.yaml
+++ b/openstack/limes-campfire/templates/deployment.yaml
@@ -50,7 +50,7 @@ spec:
               value: "https://{{ contains "qa" $dbRegion | ternary "identity-3-qa" "identity-3" }}.global.{{ $tld }}/v3"
             {{- else }}
             - name: OS_AUTH_URL
-              value: "http://keystone.{{ $.Values.global.keystoneNamespace }}.svc.{{ $.Values.global.clusterDNSSearchDomain }}:5000/v3"
+              value: "{{.Values.global.keystone_api_endpoint_protocol_internal | default "http"}}://{{include "keystone_api_endpoint_host_internal" .}}:{{ .Values.global.keystone_api_port_internal | default 5000}}/v3"
             {{- end }}
             - name: OS_USER_DOMAIN_NAME
               value: Default
diff --git a/openstack/limes/Chart.lock b/openstack/limes/Chart.lock
index 936f0b50d8e..1bf53640dce 100644
--- a/openstack/limes/Chart.lock
+++ b/openstack/limes/Chart.lock
@@ -14,5 +14,8 @@ dependencies:
 - name: owner-info
   repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
   version: 1.0.0
-digest: sha256:32cc6301702ed06ba883cace3884453da32e76c9e3a52c426c1809634df7119e
-generated: "2026-08-27T13:29:16.075810903Z"
+- name: utils
+  repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
+  version: 0.38.1
+digest: sha256:a668eeda4371d8407158d14e318390111537373058f4dbfc51fb1c0898093b91
+generated: "2026-08-27T15:30:05.579113081+02:00"
diff --git a/openstack/limes/Chart.yaml b/openstack/limes/Chart.yaml
index 38715d536ac..75d148cfbe7 100644
--- a/openstack/limes/Chart.yaml
+++ b/openstack/limes/Chart.yaml
@@ -19,3 +19,6 @@ dependencies:
   - name: owner-info
     repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
     version: '>= 0.0.0'
+  - name: utils
+    repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
+    version: '>= 0.0.0'
diff --git a/openstack/limes/templates/_utils.tpl b/openstack/limes/templates/_utils.tpl
index 15764667625..c0c940ef11e 100644
--- a/openstack/limes/templates/_utils.tpl
+++ b/openstack/limes/templates/_utils.tpl
@@ -50,7 +50,7 @@
   value: "public"
 {{- else }}
 - name: OS_AUTH_URL
-  value: "http://keystone.{{ $.Values.global.keystoneNamespace }}.svc.{{ $.Values.global.clusterDNSSearchDomain }}:5000/v3"
+  value: "{{.Values.global.keystone_api_endpoint_protocol_internal | default "http"}}://{{include "keystone_api_endpoint_host_internal" .}}:{{ .Values.global.keystone_api_port_internal | default 5000}}/v3"
 - name: OS_INTERFACE
   value: "internal"
 {{- end }}