diff --git a/hiera/common.yaml b/hiera/common.yaml
index 34d0cb3cc3..ab8d472123 100644
--- a/hiera/common.yaml
+++ b/hiera/common.yaml
@@ -444,6 +444,7 @@ cacti_hosts:
 - health.openstack.org
 - kdc01.openstack.org
 - kdc02.openstack.org
+- kdc04.openstack.org
 - lists.openstack.org
 - logstash-worker01.openstack.org
 - logstash-worker02.openstack.org
diff --git a/manifests/site.pp b/manifests/site.pp
index 6517988df7..d1a83818d8 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -1627,6 +1627,19 @@ node 'kdc02.openstack.org' {
   }
 }
 
+# Node-OS: xenial
+node 'kdc04.openstack.org' {
+  class { 'openstack_project::server':
+    iptables_public_tcp_ports => [88, 464, 749, 754],
+    iptables_public_udp_ports => [88, 464, 749],
+    sysadmins                 => hiera('sysadmins', []),
+  }
+
+  class { 'openstack_project::kdc':
+    slave => true,
+  }
+}
+
 # Node-OS: trusty
 node 'afsdb01.openstack.org' {
   $group = "afsdb"
diff --git a/modules/openstack_project/manifests/kdc.pp b/modules/openstack_project/manifests/kdc.pp
index 258af88b5e..4a985e6147 100644
--- a/modules/openstack_project/manifests/kdc.pp
+++ b/modules/openstack_project/manifests/kdc.pp
@@ -7,10 +7,12 @@ class openstack_project::kdc (
     kdcs         => [
       'kdc01.openstack.org',
       'kdc02.openstack.org',
+      'kdc04.openstack.org',
     ],
     admin_server => 'kdc.openstack.org',
     slaves       => [
       'kdc02.openstack.org',
+      'kdc04.openstack.org',
     ],
     slave        => $slave,
   }