diff --git a/hiera/common.yaml b/hiera/common.yaml
index 689bb27569..7ea0ce5184 100644
--- a/hiera/common.yaml
+++ b/hiera/common.yaml
@@ -326,6 +326,7 @@ cacti_hosts:
 - mirror02.ca-ymq-1.vexxhost.openstack.org
 - mirror02.regionone.limestone.openstack.org
 - mirror.bhs1.ovh.openstack.org
+- mirror.gra1.ovh.opendev.org
 - mirror.gra1.ovh.openstack.org
 - mirror.mtl01.inap.openstack.org
 - mirror02.us-west-1.packethost.openstack.org
diff --git a/inventory/openstack.yaml b/inventory/openstack.yaml
index 08da1f4b68..27c455ecbf 100644
--- a/inventory/openstack.yaml
+++ b/inventory/openstack.yaml
@@ -433,6 +433,16 @@ all:
         region_name: BHS1
       public_v4: 158.69.80.87
       public_v6: 2607:5300:201:2000::c:5fa4
+    mirror01.gra1.ovh.opendev.org:
+      ansible_host: 149.202.161.140
+      location:
+        cloud: openstackci-ovh
+        region_name: GRA1
+      public_v4: 149.202.161.140
+      # Note: assigned, but not setup as it needs to be manually
+      # applied; info is not provided to server metadata for
+      # auto configuration.
+      #public_v6: 2001:41d0:302:1000::f1f
     mirror01.gra1.ovh.openstack.org:
       ansible_host: 147.135.133.8
       location:
diff --git a/playbooks/host_vars/mirror01.gra1.ovh.opendev.org.yaml b/playbooks/host_vars/mirror01.gra1.ovh.opendev.org.yaml
new file mode 100644
index 0000000000..0df8cea49f
--- /dev/null
+++ b/playbooks/host_vars/mirror01.gra1.ovh.opendev.org.yaml
@@ -0,0 +1,5 @@
+ansible_python_interpreter: python3
+letsencrypt_certs:
+  mirror01-gra1-ovh-main:
+    - mirror01.gra1.ovh.opendev.org
+    - mirror.gra1.ovh.opendev.org
diff --git a/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml b/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml
index 7b743a513a..3283506763 100644
--- a/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml
+++ b/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml
@@ -28,6 +28,9 @@
 - name: letsencrypt updated mirror01-ord-rax-main
   include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
 
+- name: letsencrypt updated mirror01-gra1-ovh-main
+  include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
+
 # Gate testing hosts:
 - name: letsencrypt updated letsencrypt01-main-service
   include_tasks: roles/letsencrypt-create-certs/handlers/touch_file.yaml