diff --git a/deployment/logrotate/logrotate-crond-container-puppet.yaml b/deployment/logrotate/logrotate-crond-container-puppet.yaml
index 8333e85746..b0dc815f88 100644
--- a/deployment/logrotate/logrotate-crond-container-puppet.yaml
+++ b/deployment/logrotate/logrotate-crond-container-puppet.yaml
@@ -69,6 +69,14 @@ outputs:
         tripleo::profile::base::logging::logrotate::rotation: {get_param: LogrotateRotationInterval}
         tripleo::profile::base::logging::logrotate::rotate: {get_param: LogrotateRotate}
         tripleo::profile::base::logging::logrotate::purge_after_days: {get_param: LogrotatePurgeAfterDays}
+
+      host_prep_tasks:
+        - name: allow logrotate to read inside containers
+          seboolean:
+            name: logrotate_read_inside_containers
+            persistent: yes
+            state: yes
+
       deploy_steps_tasks:
         - name: configure tmpwatch on the host
           when: step|int == 2