diff --git a/docker/services/haproxy.yaml b/docker/services/haproxy.yaml
index 429d5960bf..f6fe901538 100644
--- a/docker/services/haproxy.yaml
+++ b/docker/services/haproxy.yaml
@@ -220,7 +220,7 @@ outputs:
                     # the necessary bit and prevent systemd to try to reload the service in the container
                     - /usr/libexec/iptables:/usr/libexec/iptables:ro
                     - /usr/libexec/initscripts/legacy-actions:/usr/libexec/initscripts/legacy-actions:ro
-                    - /var/lib/haproxy:/var/lib/haproxy:rw
+                    - /var/lib/haproxy:/var/lib/haproxy:rw,z
               environment:
                 - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
             haproxy:
@@ -236,7 +236,7 @@ outputs:
                   -
                     - /var/lib/kolla/config_files/haproxy.json:/var/lib/kolla/config_files/config.json:ro
                     - /var/lib/config-data/puppet-generated/haproxy/:/var/lib/kolla/config_files/src:ro
-                    - /var/lib/haproxy:/var/lib/haproxy:rw
+                    - /var/lib/haproxy:/var/lib/haproxy:rw,z
                   - if:
                     - public_tls_enabled
                     - - list_join: