diff --git a/manifests/site.pp b/manifests/site.pp
index 1cada2af5c..2dd09b0e27 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -501,6 +501,7 @@ node /^elasticsearch0[1-7]\.openstack\.org$/ {
 
 # CentOS machines to load balance git access.
 # Node-OS: centos6
+# Node-OS: centos7
 node /^git(-fe\d+)?\.openstack\.org$/ {
   $group = "git-loadbalancer"
   class { 'openstack_project::git':
diff --git a/modules/openstack_project/manifests/git.pp b/modules/openstack_project/manifests/git.pp
index d4911a4099..23eb3479e6 100644
--- a/modules/openstack_project/manifests/git.pp
+++ b/modules/openstack_project/manifests/git.pp
@@ -127,6 +127,14 @@ class openstack_project::git (
     options           => 'maxqueue 512',
   }
 
+  exec { 'haproxy_allow_bind_ports':
+    # If bool is already set don't set it again
+    onlyif  => 'bash -c \'getsebool haproxy_connect_any | grep -q off\'',
+    command => 'setsebool -P haproxy_connect_any 1',
+    path    => '/bin:/usr/sbin',
+    before  => Service['haproxy'],
+  }
+
   file { '/etc/rsyslog.d/haproxy.conf':
     ensure => present,
     owner  => 'root',