diff --git a/roles/ipsilon/templates/configmap.yml b/roles/ipsilon/templates/configmap.yml
index 92c242ad71..edc99b2089 100644
--- a/roles/ipsilon/templates/configmap.yml
+++ b/roles/ipsilon/templates/configmap.yml
@@ -21,6 +21,8 @@ data:
      ticket_lifetime = 24h
      renew_lifetime = 7d
      forwardable = true
+     default_keytab_name = FILE:/etc/keytabs/ipsilon-keytab
+     default_client_keytab_name = FILE:/etc/keytabs/ipsilon-keytab
     [realms]
      {{ ipa_realm }} = {
       kdc = https://id{{ env_suffix }}.fedoraproject.org/KdcProxy