diff --git a/puppet/services/haproxy-internal-tls-certmonger.j2.yaml b/puppet/services/haproxy-internal-tls-certmonger.j2.yaml
index 80edda6246..046e2cc6f3 100644
--- a/puppet/services/haproxy-internal-tls-certmonger.j2.yaml
+++ b/puppet/services/haproxy-internal-tls-certmonger.j2.yaml
@@ -88,6 +88,7 @@ outputs:
                     - '/overcloud-haproxy-NETWORK.key'
                 hostname: "%{hiera('cloud_name_NETWORK')}"
                 principal: "haproxy/%{hiera('cloud_name_NETWORK')}"
+                postsave_cmd: "/usr/bin/certmonger-haproxy-refresh.sh reload NETWORK"
             for_each:
               NETWORK: {get_attr: [HAProxyNetworks, value]}
       metadata_settings:
diff --git a/puppet/services/haproxy-public-tls-certmonger.yaml b/puppet/services/haproxy-public-tls-certmonger.yaml
index 4419972f5b..6c3142ebee 100644
--- a/puppet/services/haproxy-public-tls-certmonger.yaml
+++ b/puppet/services/haproxy-public-tls-certmonger.yaml
@@ -69,6 +69,7 @@ outputs:
               - '/overcloud-haproxy-external.key'
           hostname: "%{hiera('cloud_name_external')}"
           principal: "haproxy/%{hiera('cloud_name_external')}"
+          postsave_cmd: "/usr/bin/certmonger-haproxy-refresh.sh restart external"
       metadata_settings:
         - service: haproxy
           network: external