diff --git a/playbooks/openshift-apps/toddlers.yml b/playbooks/openshift-apps/toddlers.yml
index 3b5fc4d496..8baeaaa88b 100644
--- a/playbooks/openshift-apps/toddlers.yml
+++ b/playbooks/openshift-apps/toddlers.yml
@@ -52,6 +52,11 @@
       warning: 10
       critical: 100
 
+  - role: openshift/keytab
+    app: toddlers
+    key: service.keytab
+    secret_name: toddlers-keytab
+
   - role: openshift/ipa-client
     app: toddlers
 
diff --git a/roles/openshift-apps/toddlers/templates/deploymentconfig.yml b/roles/openshift-apps/toddlers/templates/deploymentconfig.yml
index 1052abfd68..ddfda02bba 100644
--- a/roles/openshift-apps/toddlers/templates/deploymentconfig.yml
+++ b/roles/openshift-apps/toddlers/templates/deploymentconfig.yml
@@ -40,6 +40,12 @@ spec:
         - name: fedora-messaging-cert-volume
           mountPath: /etc/pki/rabbitmq/cert
           readOnly: true
+        - name: ipa-config-volume
+          mountPath: /etc/ipa
+          readOnly: true
+        - name: keytab-volume
+          mountPath: /etc/keytabs
+          readOnly: true
       volumes:
       - name: toddlers-secret-volume
         secret:
@@ -53,6 +59,12 @@ spec:
       - name: fedora-messaging-cert-volume
         secret:
           secretName: toddlers-fedora-messaging-crt
+      - name: ipa-config-volume
+        configMap:
+          name: ipa-client-config
+      - name: keytab-volume
+        secret:
+          secretName: toddlers-keytab
 
   triggers:
   - type: ConfigChange