diff --git a/k8s/yamls/qa-rally.yaml b/k8s/yamls/qa-rally.yaml
index c889c95..86ec4e4 100644
--- a/k8s/yamls/qa-rally.yaml
+++ b/k8s/yamls/qa-rally.yaml
@@ -63,12 +63,18 @@
         secretKeyRef:
           key: OS_DEFAULT_DOMAIN
           name: keystone-keystone-admin
+    - name: OS_CACERT
+      value: /etc/ssl/certs/openstack-ca-bundle.pem
     imagePullPolicy: IfNotPresent
     name: rally
     image: registry.mirantis.com/professional-services-qa/xrally-kube:latest
     volumeMounts:
     - mountPath: /artifacts
       name: qa-pv-r
+    - mountPath: /etc/ssl/certs/openstack-ca-bundle.pem
+      name: ca-cert-bundle
+      readOnly: true
+      subPath: ca_bundle
   dnsPolicy: ClusterFirst
   volumes:
   - emptyDir: {}
@@ -76,3 +82,7 @@
   - name: qa-pv-r
     persistentVolumeClaim:
       claimName: qa-pvc-r
+  - name: ca-cert-bundle
+    secret:
+      defaultMode: 420
+      secretName: keystone-ca-bundle