diff --git a/docker/services/haproxy.yaml b/docker/services/haproxy.yaml
index 7ced5afed1..475516f73a 100644
--- a/docker/services/haproxy.yaml
+++ b/docker/services/haproxy.yaml
@@ -226,7 +226,7 @@ outputs:
                     # the necessary bit and prevent systemd to try to reload the service in the container
                     - /usr/libexec/iptables:/usr/libexec/iptables:ro
                     - /usr/libexec/initscripts/legacy-actions:/usr/libexec/initscripts/legacy-actions:ro
-                    - /var/lib/haproxy:/var/lib/haproxy:rw
+                    - /var/lib/haproxy:/var/lib/haproxy:rw,z
               environment:
                 - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
             haproxy:
@@ -242,7 +242,7 @@ outputs:
                   -
                     - /var/lib/kolla/config_files/haproxy.json:/var/lib/kolla/config_files/config.json:ro
                     - /var/lib/config-data/puppet-generated/haproxy/:/var/lib/kolla/config_files/src:ro
-                    - /var/lib/haproxy:/var/lib/haproxy:rw
+                    - /var/lib/haproxy:/var/lib/haproxy:rw,z
                   - if:
                     - public_tls_enabled
                     - - list_join: