diff --git a/ansible/roles/kolla-ansible/templates/overcloud-components.j2 b/ansible/roles/kolla-ansible/templates/overcloud-components.j2
index 0ef0a176c..88781653f 100644
--- a/ansible/roles/kolla-ansible/templates/overcloud-components.j2
+++ b/ansible/roles/kolla-ansible/templates/overcloud-components.j2
@@ -15,6 +15,7 @@ bifrost
 
 [tls-backend:children]
 control
+network
 
 # You can explicitly specify which hosts run each project by updating the
 # groups in the sections below. Common services are grouped together.
diff --git a/releasenotes/notes/bug-2117084-8d1eaa375df1d1f8.yaml b/releasenotes/notes/bug-2117084-8d1eaa375df1d1f8.yaml
new file mode 100644
index 000000000..1e275e202
--- /dev/null
+++ b/releasenotes/notes/bug-2117084-8d1eaa375df1d1f8.yaml
@@ -0,0 +1,6 @@
+---
+fixes:
+  - |
+    Fixes configuration of backend TLS when network nodes are separate from
+    controllers.
+    `LP#2117084 <https://bugs.launchpad.net/kayobe/+bug/2117084>`__