diff --git a/playbooks/openshift-apps/toddlers.yml b/playbooks/openshift-apps/toddlers.yml
index 1fa070d692..ad88be73d8 100644
--- a/playbooks/openshift-apps/toddlers.yml
+++ b/playbooks/openshift-apps/toddlers.yml
@@ -64,6 +64,7 @@
     key: service.keytab
     secret_name: toddlers-keytab
     service: toddlers
+    host: "koji{{env_suffix}}.fedoraproject.org"
 
   - role: openshift/ipa-client
     app: toddlers
diff --git a/roles/openshift-apps/toddlers/templates/fedora-messaging.toml b/roles/openshift-apps/toddlers/templates/fedora-messaging.toml
index 7cdac1bf68..534381c590 100644
--- a/roles/openshift-apps/toddlers/templates/fedora-messaging.toml
+++ b/roles/openshift-apps/toddlers/templates/fedora-messaging.toml
@@ -211,6 +211,7 @@ profile = "stg"
 {% else %}
 profile = "koji"
 {% endif %}
+principal = {{service}}/{{host}}
 keytab = "/etc/keytabs/service.keytab"
 
 # Configuration section for scm_request_processor