diff --git a/manifests/site.pp b/manifests/site.pp
index 7abc361219..e9b3703f1c 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -1196,7 +1196,7 @@ node /^ze\d+\.openstack\.org$/ {
     gearman_ssl_ca           => hiera('gearman_ssl_ca'),
     #TODO(pabelanger): Add openafs role for zuul-jobs to setup /etc/openafs
     # properly. We need to revisting this post Queens PTG.
-    trusted_ro_paths         => ['/etc/openafs', '/var/lib/zuul/ssh'],
+    trusted_ro_paths         => ['/etc/openafs', '/etc/ssl/certs', '/var/lib/zuul/ssh'],
     trusted_rw_paths         => ['/afs'],
     disk_limit_per_job       => 5000,  # Megabytes
     site_variables_yaml_file => $::project_config::zuul_site_variables_yaml,