diff --git a/manifests/profile/pacemaker/database/redis_bundle.pp b/manifests/profile/pacemaker/database/redis_bundle.pp
index 2d89356d9..317587e18 100644
--- a/manifests/profile/pacemaker/database/redis_bundle.pp
+++ b/manifests/profile/pacemaker/database/redis_bundle.pp
@@ -266,7 +266,7 @@ slave-announce-port ${local_tuple[0][2]}
         'redis-run'                     => {
           'source-dir' => '/var/run/redis',
           'target-dir' => '/var/run/redis',
-          'options'    => 'rw',
+          'options'    => 'rw,z',
         },
         # TODO check whether those tls mappings are necessary
         'redis-pki-extracted'           => {