diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index db3c554e8fda79601c6e46b2d96c8866947ddbd0..e03276f985182317dd229830dbeec1a8621cc357 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -30,6 +30,7 @@ terraform-single:
     - ln -sfv $TERRAFORM_CONFIG testsuite.auto.tfvars
     # https://github.com/terraform-provider-openstack/terraform-provider-openstack/issues/1160
     - touch ./secure.yml
+    - token=`openstack token issue -f value -c id
     - ip=`openstack floating ip create -c floating_ip_address -f value public-muni-147-251-21-GROUP`
   cache:
     when: always
@@ -39,13 +40,14 @@ terraform-single:
       - "*.tfstate"
   script:
     - terraform init
-    - args="-auto-approve -var type=hadoop-single -var flavor=standard.large -var n=0 -var domain=terra1 -var image_name=$IMAGE_NAME -var image_visibility=$IMAGE_VISIBILITY -var floating_ip=$ip"
+    - args="-auto-approve -var type=hadoop-single -var flavor=standard.large -var n=0 -var domain=terra1 -var image_name=$IMAGE_NAME -var image_visibility=$IMAGE_VISIBILITY -var floating_ip=$ip -var token=$token"
     - terraform apply $args
     - eval $(ssh-agent -s)
     - ssh-add ./ssh-key.terra1.txt
     - ssh -o PreferredAuthentications=publickey deployadm@$ip "sudo -u debian sh -c 'cd; ~deployadm/terraform/image/tests/run-tests.sh'"
     - terraform destroy $args
     - openstack floating ip delete $ip
+    - openstack token revoke $token
   rules:
     - if: '$JOB =~ /all|test-single/'
   artifacts: &artifacts
@@ -63,13 +65,14 @@ terraform-cluster:
       - "*.tfstate"
   script:
     - terraform init
-    - args="-auto-approve -var type=hadoop -var domain=terra2 -var image_name=$IMAGE_NAME -var image_visibility=$IMAGE_VISIBILITY -var floating_ip=$ip"
+    - args="-auto-approve -var type=hadoop -var domain=terra2 -var image_name=$IMAGE_NAME -var image_visibility=$IMAGE_VISIBILITY -var floating_ip=$ip -var token=$token"
     - terraform apply $args
     - eval $(ssh-agent -s)
     - ssh-add ./ssh-key.terra2.txt
     - ssh -o PreferredAuthentications=publickey deployadm@$ip "sudo -u debian sh -c 'cd; ~deployadm/terraform/image/tests/run-tests.sh'"
     - terraform destroy $args
     - openstack floating ip delete $ip
+    - openstack token revoke $token
   rules:
     - if: '$JOB =~ /all|test-cluster/'
   artifacts: *artifacts