diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml
index f0e525cca..00fb1913c 100644
--- a/etc/kayobe/kolla-image-tags.yml
+++ b/etc/kayobe/kolla-image-tags.yml
@@ -6,6 +6,9 @@ kolla_image_tags:
   openstack:
     rocky-9: 2024.1-rocky-9-20241218T141751
     ubuntu-jammy: 2024.1-ubuntu-jammy-20241218T141809
+  bifrost:
+    rocky-9: 2024.1-rocky-9-20250325T141125
+    ubuntu-jammy: 2024.1-ubuntu-jammy-20250325T141125
   glance:
     rocky-9: 2024.1-rocky-9-20250213T103134
     ubuntu-jammy: 2024.1-ubuntu-jammy-20250213T103134
diff --git a/etc/kayobe/kolla/config/bifrost/bifrost.yml b/etc/kayobe/kolla/config/bifrost/bifrost.yml
index 16ea3ac3b..6310d4931 100644
--- a/etc/kayobe/kolla/config/bifrost/bifrost.yml
+++ b/etc/kayobe/kolla/config/bifrost/bifrost.yml
@@ -8,3 +8,12 @@ cirros_deploy_image_upstream_url: "{{ stackhpc_overcloud_host_image_url }}"
 
 # Disable debug logging to avoid generating large log files
 ironic_debug: false
+
+# Use prebuilt release train IPA images from Ark.
+{% if stackhpc_ipa_image_bifrost_enabled | bool %}
+ipa_download_url_username: "{{ stackhpc_release_pulp_username }}"
+ipa_download_url_password: "{{ stackhpc_release_pulp_password }}"
+ipa_download_force_basic_auth: true
+ipa_download_unredirected_headers:
+  - Authorization
+{% endif %}
diff --git a/releasenotes/notes/bifrost-fix-ipa-auth-9d0e0c3b948b5850.yaml b/releasenotes/notes/bifrost-fix-ipa-auth-9d0e0c3b948b5850.yaml
new file mode 100644
index 000000000..87bb66c90
--- /dev/null
+++ b/releasenotes/notes/bifrost-fix-ipa-auth-9d0e0c3b948b5850.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    Fixes an issue where the IPA images in Ark could not be downloaded by
+    Bifrost, due to missing authentication parameters.