diff --git a/inventory/host_vars/bodhi03.phx2.fedoraproject.org b/inventory/host_vars/bodhi03.phx2.fedoraproject.org
index 19dedb83b6..a0afc45b95 100644
--- a/inventory/host_vars/bodhi03.phx2.fedoraproject.org
+++ b/inventory/host_vars/bodhi03.phx2.fedoraproject.org
@@ -9,3 +9,41 @@ eth0_ip: 10.5.126.115
 vmhost: virthost01.phx2.fedoraproject.org
 datacenter: phx2
 max_mem_size: 16384
+
+fedmsg_certs:
+- service: shell
+  owner: root
+  group: sysadmin
+  can_send:
+  - logger.log
+- service: bodhi
+  owner: root
+  group: bodhi
+  can_send:
+  - bodhi.buildroot_override.tag
+  - bodhi.buildroot_override.untag
+  - bodhi.stack.delete
+  - bodhi.stack.save
+  - bodhi.update.comment
+  - bodhi.update.complete.testing
+  - bodhi.update.edit
+  - bodhi.update.karma.threshold.reach
+  - bodhi.update.request.obsolete
+  - bodhi.update.request.revoke
+  - bodhi.update.request.stable
+  - bodhi.update.request.testing
+  - bodhi.update.request.batched
+  - bodhi.update.request.unpush
+
+  # Things that only the mash does - not the web UI
+  #- bodhi.mashtask.complete
+  #- bodhi.mashtask.mashing
+  #- bodhi.mashtask.start
+  #- bodhi.mashtask.sync.done
+  #- bodhi.mashtask.sync.wait
+  #- bodhi.errata.publish
+  #- bodhi.update.eject
+
+  # Rsync messages that get run from somewhere else entirely.
+  #- bodhi.updates.epel.sync
+  #- bodhi.updates.fedora.sync
diff --git a/inventory/inventory b/inventory/inventory
index 472d8ec953..5d1a69d5db 100644
--- a/inventory/inventory
+++ b/inventory/inventory
@@ -1443,6 +1443,7 @@ bodhi-backend01.phx2.fedoraproject.org
 [openshift-pseudohosts:children]
 greenwave
 waiverdb
+bodhi-openshift
 #librariesio2fedmsg
 
 [openshift-pseudohosts-stg:children]
@@ -1450,6 +1451,9 @@ greenwave-stg
 waiverdb-stg
 librariesio2fedmsg-stg
 
+[bodhi-openshift]
+bodhi03.phx2.fedoraproject.org
+
 [greenwave]
 greenwave-web-greenwave.app.os.fedoraproject.org