diff --git a/playbooks/openshift-apps/coreos-cincinnati.yml b/playbooks/openshift-apps/coreos-cincinnati.yml
new file mode 100644
index 0000000000..10c1a6c585
--- /dev/null
+++ b/playbooks/openshift-apps/coreos-cincinnati.yml
@@ -0,0 +1,60 @@
+- name: provision CoreOS Cincinnati backend
+  hosts: os_masters_stg[0]
+  user: root
+  gather_facts: False
+
+  vars_files:
+    - /srv/web/infra/ansible/vars/global.yml
+    - "/srv/private/ansible/vars.yml"
+    - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
+
+  pre_tasks:
+  - include_vars: dir=/srv/web/infra/ansible/vars/all/ ignore_files=README
+
+  roles:
+  - role: openshift/project
+    app: coreos-cincinnati
+    description: Fedora CoreOS Cincinnati backend
+    appowners:
+    - jlebon
+    - lucab
+    - sanja
+
+  - role: openshift/imagestream
+    app: coreos-cincinnati
+    imagename: fedora-coreos-cincinnati
+
+  - role: openshift/object
+    app: coreos-cincinnati
+    file: buildconfig-stub.yml
+    objectname: buildconfig-stub.yml
+
+  - role: openshift/start-build
+    app: coreos-cincinnati
+    buildname: coreos-cincinnati-stub
+
+  - role: openshift/object
+    app: coreos-cincinnati
+    file: config-stub.yml
+    objectname: config-stub.yml
+
+  - role: openshift/object
+    app: coreos-cincinnati
+    file: deploymentconfig.yml
+    objectname: deploymentconfig.yml
+
+  - role: openshift/object
+    app: coreos-cincinnati
+    file: service.yml
+    objectname: service.yml
+
+  - role: openshift/route
+    app: coreos-cincinnati
+    routename: coreos-updates
+    host: "updates{{ env_suffix }}.coreos.fedoraproject.org"
+    serviceport: 443-tcp
+    servicename: coreos-cincinnati
+
+  - role: openshift/rollout
+    app: coreos-cincinnati
+    dcname: coreos-cincinnatii-stub
diff --git a/roles/openshift-apps/coreos-cincinnati/files/buildconfig-stub.yml b/roles/openshift-apps/coreos-cincinnati/files/buildconfig-stub.yml
new file mode 100644
index 0000000000..2b4188f086
--- /dev/null
+++ b/roles/openshift-apps/coreos-cincinnati/files/buildconfig-stub.yml
@@ -0,0 +1,30 @@
+---
+# TODO(lucab): template refs from ansible var
+apiVersion: v1
+kind: BuildConfig
+metadata:
+  name: "coreos-cincinnati-stub"
+  labels:
+    app: "coreos-cincinnati"
+spec:
+  resources:
+    requests:
+      memory: "3Gi"
+    limits:
+      memory: "3Gi"
+  runPolicy: "Serial"
+  strategy:
+    type: "Docker"
+    dockerStrategy:
+      dockerfilePath: "dist/fedora-infra/Dockerfile"
+  source:
+    type: "Git"
+    git:
+      uri: "https://github.com/lucab/exp-dumnati.git"
+      ref: "124d9475717eae13cf2e76a8a455f0ee542a75cb"
+  triggers:
+    - type: "ConfigChange"
+  output:
+    to:
+      kind: "ImageStreamTag"
+      name: "fedora-coreos-cincinnati:dumnati-124d9475717eae13cf2e76a8a455f0ee542a75cb"
diff --git a/roles/openshift-apps/coreos-cincinnati/files/config-stub.yml b/roles/openshift-apps/coreos-cincinnati/files/config-stub.yml
new file mode 100644
index 0000000000..d6879656e3
--- /dev/null
+++ b/roles/openshift-apps/coreos-cincinnati/files/config-stub.yml
@@ -0,0 +1,12 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: coreos-cincinnati-config-stub
+data:
+  config.json: |
+    {
+      "version": "target-version",
+      "metadata": {},
+      "payload": "dummy-digest"
+    }
diff --git a/roles/openshift-apps/coreos-cincinnati/files/deploymentconfig.yml b/roles/openshift-apps/coreos-cincinnati/files/deploymentconfig.yml
new file mode 100644
index 0000000000..ffb414e478
--- /dev/null
+++ b/roles/openshift-apps/coreos-cincinnati/files/deploymentconfig.yml
@@ -0,0 +1,56 @@
+---
+# TODO(lucab): template refs from ansible var
+apiVersion: v1
+kind: DeploymentConfig
+metadata:
+  name: coreos-cincinnati-stub
+  labels:
+    app: coreos-cincinnati
+spec:
+  replicas: 1
+  selector:
+    app: coreos-cincinnati
+  strategy:
+    activeDeadlineSeconds: 21600
+    recreateParams:
+      timeoutSeconds: 600
+    resources: {}
+    rollingParams:
+      intervalSeconds: 1
+      maxSurge: 25%
+      maxUnavailable: 25%
+      timeoutSeconds: 600
+      updatePeriodSeconds: 1
+    type: Rolling
+  template:
+    metadata:
+      labels:
+        app: coreos-cincinnati
+    spec:
+      containers:
+        - name: "dumnati"
+          image: "fedora-coreos-cincinnati:dumnati-124d9475717eae13cf2e76a8a455f0ee542a75cb"
+          args: [
+            "/usr/local/bin/dumnati",
+            "-p", "9876",
+            "/etc/cincinnati/config.json",
+          ]
+          ports:
+            - containerPort: 9876
+          volumeMounts:
+            - name: "config"
+              mountPath: "/etc/cincinnati/"
+              readOnly: true
+      volumes:
+        - name: "config"
+          configMap:
+            name: "coreos-cincinnati-config-stub"
+  triggers:
+    - imageChangeParams:
+        automatic: true
+        containerNames:
+          - "dumnati"
+        from:
+          kind: ImageStreamTag
+          name: "fedora-coreos-cincinnati:dumnati-124d9475717eae13cf2e76a8a455f0ee542a75cb"
+      type: ImageChange
diff --git a/roles/openshift-apps/coreos-cincinnati/files/service.yml b/roles/openshift-apps/coreos-cincinnati/files/service.yml
new file mode 100644
index 0000000000..6edb27aa4d
--- /dev/null
+++ b/roles/openshift-apps/coreos-cincinnati/files/service.yml
@@ -0,0 +1,12 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: coreos-cincinnati
+spec:
+  ports:
+    - name: coreos-cincinnati-service
+      port: 443
+      targetPort: 9876
+  selector:
+    app: coreos-cincinnati