diff --git a/docker/services/haproxy.yaml b/docker/services/haproxy.yaml
index b6c4352700..b774ad9aa1 100644
--- a/docker/services/haproxy.yaml
+++ b/docker/services/haproxy.yaml
@@ -198,16 +198,17 @@ outputs:
                     - - {get_param: DeployedSSLCertificatePath}
                       - {get_param: DeployedSSLCertificatePath}
                       - 'ro'
-                  -
-                    if:
-                      - internal_tls_enabled
-                      - /etc/pki/tls/certs/haproxy:/var/lib/kolla/config_files/src-tls/etc/pki/tls/certs/haproxy:ro
-                      - ''
-                  -
-                    if:
-                      - internal_tls_enabled
+                -
+                  if:
+                    - internal_tls_enabled
+                    - - /etc/pki/tls/certs/haproxy:/var/lib/kolla/config_files/src-tls/etc/pki/tls/certs/haproxy:ro
                       - /etc/pki/tls/private/haproxy:/var/lib/kolla/config_files/src-tls/etc/pki/tls/private/haproxy:ro
-                      - ''
+                      - list_join:
+                          - ':'
+                          - - {get_param: InternalTLSCAFile}
+                            - {get_param: InternalTLSCAFile}
+                            - 'ro'
+                    - null
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       metadata_settings: