diff --git a/ansible/group_vars/all/ipa b/ansible/group_vars/all/ipa
index 0d88e4dfe..b7d589208 100644
--- a/ansible/group_vars/all/ipa
+++ b/ansible/group_vars/all/ipa
@@ -44,7 +44,7 @@ ipa_build_dib_elements: >
 ipa_build_dib_env_default:
   # TODO(mgoddard): Use {{ os_release }} here when we use os_distribution
   # above.
-  DIB_RELEASE: "8-stream"
+  DIB_RELEASE: "9-stream"
   DIB_REPOLOCATION_ironic_python_agent: "{{ ipa_build_source_url }}"
   DIB_REPOREF_ironic_python_agent: "{{ ipa_build_source_version }}"
   DIB_REPOREF_requirements: "{{ openstack_branch }}"
diff --git a/releasenotes/notes/fix-ipa-eventlet-issues-82941ff32f31f2cb.yaml b/releasenotes/notes/fix-ipa-eventlet-issues-82941ff32f31f2cb.yaml
new file mode 100644
index 000000000..1a8c39176
--- /dev/null
+++ b/releasenotes/notes/fix-ipa-eventlet-issues-82941ff32f31f2cb.yaml
@@ -0,0 +1,8 @@
+---
+upgrade:
+  - |
+    Ironic Python Agent images are now built using CentOS Stream 9 by default.
+fixes:
+  - |
+    Fixes issues with TLS and eventlet affecting Ironic Python Agent. IPA
+    images should be rebuilt for affected deployments.