diff --git a/config/general_config/featureset043.yml b/config/general_config/featureset043.yml
new file mode 100644
index 000000000..5c5e02bb7
--- /dev/null
+++ b/config/general_config/featureset043.yml
@@ -0,0 +1,193 @@
+# Summary of feature set
+# Deploy an HA OpenStack environment with FreeIPA as an IdM.
+# Note that this feature set derives from featureset039 and is meant for use
+# in local development using the libvirt/setup/supplemental/ roles. It is not
+# tested or meant to run in upstream or 3rd party CI.
+
+# This enables TLS for the undercloud which will also make haproxy bind to the
+# configured public-vip and admin-vip.
+undercloud_generate_service_certificate: true
+ssl_overcloud: true
+overcloud_templates_path: /usr/share/openstack-tripleo-heat-templates
+undercloud_templates_path: /usr/share/openstack-tripleo-heat-templates
+step_introspect: true
+
+# This enables container deployements after Pike
+containerized_overcloud: >-
+  {% if release in ['newton', 'ocata', 'pike'] -%}
+  false
+  {%- else -%}
+  true
+  {%- endif -%}
+delete_docker_cache: true
+
+containerized_undercloud: >-
+  {% if release not in ['newton','ocata','pike','queens'] -%}
+  true
+  {%- else -%}
+  false
+  {%- endif -%}
+
+ctlplane_masquerade: >-
+  {% if release not in ['newton','ocata','pike','queens'] -%}
+  true
+  {%- else -%}
+  false
+  {%- endif -%}
+
+undercloud_enable_routed_networks: >-
+  {% if release not in ['newton','ocata','pike'] -%}
+  true
+  {%- else -%}
+  false
+  {%- endif -%}
+
+undercloud_clean_nodes: >-
+  {% if release not in ['newton','ocata','pike'] -%}
+  true
+  {%- else -%}
+  false
+  {%- endif -%}
+
+undercloud_inspection_extras: false
+
+
+# Tell tripleo about our environment.
+enable_pacemaker: true
+network_isolation: true
+network_isolation_type: "single-nic-vlans"
+
+# This featureset is extremely resource intensive, so we disable telemetry
+# in order to reduce the overall memory footprint
+# This is not required in newton
+telemetry_args: >-
+   {% if release != 'newton' %}
+   -e {{ overcloud_templates_path }}/environments/disable-telemetry.yaml
+   {% endif %}
+
+extra_args: >-
+   {% if release not in ['newton', 'ocata', 'pike'] %}
+   -e {{ overcloud_templates_path }}/ci/environments/ovb-ha.yaml
+   {% endif %}
+
+undercloud_ntp_servers: pool.ntp.org
+# keep the doc gen settings at the bottom of the config file.
+# options below direct automatic doc generation by tripleo-collect-logs
+artcl_gen_docs: true
+artcl_create_docs_payload:
+  included_deployment_scripts:
+    - undercloud-install
+    - novajoin_prep
+    - install_novajoin
+    - overcloud-custom-tht-script
+    - "{% if release not in ['newton', 'ocata', 'pike'] -%}overcloud-prep-containers{%- endif -%}"
+    - overcloud-prep-flavors
+    - overcloud-prep-images
+    - overcloud-prep-network
+    - overcloud-deploy
+    - overcloud-deploy-post
+    - overcloud-validate
+    - "{% if run_tempest|bool -%}tempest-setup{%- endif -%}"
+    - "{% if run_tempest|bool and tempest_format|default('packages') == 'containers' -%}tempest_container{%- endif -%}"
+  included_static_docs:
+    - env-setup-virt
+  table_of_contents:
+    - env-setup-virt
+    - novajoin_prep
+    - install_novajoin
+    - undercloud-install
+    - overcloud-custom-tht-script
+    - "{% if release not in ['newton', 'ocata', 'pike'] -%}overcloud-prep-containers{%- endif -%}"
+    - overcloud-prep-flavors
+    - overcloud-prep-images
+    - overcloud-prep-network
+    - overcloud-deploy
+    - overcloud-deploy-post
+    - overcloud-validate
+    - "{% if run_tempest|bool -%}tempest-setup{%- endif -%}"
+    - "{% if run_tempest|bool and tempest_format|default('packages') == 'containers' -%}tempest_container{%- endif -%}"
+
+deploy_steps_ansible_workflow: >-
+  {% if release not in ['newton','ocata','pike'] -%}
+  true
+  {%- else -%}
+  false
+  {%- endif -%}
+config_download_args: >-
+  {% if release in ['queens'] -%}
+  -e /usr/share/openstack-tripleo-heat-templates/environments/config-download-environment.yaml
+  --config-download
+  --verbose
+  {%- endif -%}
+
+# Tempest configuration, keep always at the end of the file
+# Use the traditional ping test in newton, ocata and pike
+# Run tempest in queens+
+test_ping: >-
+  {% if release in ['newton', 'ocata', 'pike'] -%}
+  true
+  {%- else -%}
+  false
+  {%- endif -%}
+
+run_tempest: >-
+  {% if release in ['newton', 'ocata', 'pike'] -%}
+  false
+  {%- else -%}
+  true
+  {%- endif -%}
+
+test_white_regex: ''
+tempest_whitelist:
+  - 'tempest.scenario.test_network_basic_ops.TestNetworkBasicOps.test_network_basic_ops'
+tempest_format: >-
+  {% if containerized_undercloud|bool -%}
+  container
+  {%- else -%}
+  packages
+  {%- endif -%}
+undercloud_enable_tempest: >-
+  {% if release not in ['newton', 'ocata', 'pike', 'queens'] -%}
+  true
+  {%- else -%}
+  false
+  {%- endif -%}
+
+undercloud_container_cli: >-
+  {% if release in ['rocky'] -%}
+  docker
+  {%- else -%}
+  podman
+  {%- endif -%}
+
+# TLS everywhere related vars. #
+enable_tls_everywhere: true
+novajoin_connect_timeout: 60
+novajoin_read_timeout: 60
+
+freeipa_admin_password: fce95318204114530f31f885c9df588f
+
+# Set node hostnames.
+freeipa_internal_ip: "{{ external_network_cidr|nthhost(250) }}"
+supplemental_node_ip: "{{ freeipa_internal_ip }}"
+undercloud_undercloud_nameservers: ["{{ freeipa_internal_ip }}"]
+overcloud_dns_servers: ["{{ freeipa_internal_ip }}", "8.8.8.8"]
+tripleo_domain: ooo.test
+undercloud_cloud_domain: "{{ tripleo_domain }}"
+freeipa_server_hostname: "ipa.{{ tripleo_domain }}"
+undercloud_undercloud_hostname: "undercloud.{{ tripleo_domain }}"
+overcloud_cloud_name: "overcloud.{{ tripleo_domain }}"
+overcloud_cloud_domain: "{{ tripleo_domain }}"
+overcloud_cloud_name_internal: "overcloud.internalapi.{{ tripleo_domain }}"
+overcloud_cloud_name_storage: "overcloud.storage.{{ tripleo_domain }}"
+overcloud_cloud_name_storage_management: "overcloud.storagemgmt.{{ tripleo_domain }}"
+overcloud_cloud_name_ctlplane: "overcloud.ctlplane.{{ tripleo_domain }}"
+# Supplemental node related vars. #
+# Ensure that the FreeIPA server node is provisioned during deployment.
+deploy_supplemental_node: true
+supplemental_user: centos
+supplemental_image_url: https://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.qcow2
+
+undercloud_custom_env_files: "{{ working_dir }}/undercloud-parameter-defaults.yaml"
+undercloud_resource_registry_args:
+  "OS::TripleO::Undercloud::Net::SoftwareConfig": "{{ undercloud_templates_path }}/net-config-undercloud.yaml"