diff --git a/k8s/yamls/qa-rally.yaml b/k8s/yamls/qa-rally.yaml
index c889c95..86ec4e4 100644
--- a/k8s/yamls/qa-rally.yaml
+++ b/k8s/yamls/qa-rally.yaml
@@ -63,12 +63,18 @@
         secretKeyRef:
           key: OS_DEFAULT_DOMAIN
           name: keystone-keystone-admin
+    - name: OS_CACERT
+      value: /etc/ssl/certs/openstack-ca-bundle.pem
     imagePullPolicy: IfNotPresent
     name: rally
     image: registry.mirantis.com/professional-services-qa/xrally-kube:latest
     volumeMounts:
     - mountPath: /artifacts
       name: qa-pv-r
+    - mountPath: /etc/ssl/certs/openstack-ca-bundle.pem
+      name: ca-cert-bundle
+      readOnly: true
+      subPath: ca_bundle
   dnsPolicy: ClusterFirst
   volumes:
   - emptyDir: {}
@@ -76,3 +82,7 @@
   - name: qa-pv-r
     persistentVolumeClaim:
       claimName: qa-pvc-r
+  - name: ca-cert-bundle
+    secret:
+      defaultMode: 420
+      secretName: keystone-ca-bundle
diff --git a/k8s/yamls/qa-toolset-bare.yaml b/k8s/yamls/qa-toolset-bare.yaml
index 4146d93..679882f 100644
--- a/k8s/yamls/qa-toolset-bare.yaml
+++ b/k8s/yamls/qa-toolset-bare.yaml
@@ -10,10 +10,7 @@
     - infinity
     imagePullPolicy: IfNotPresent
     name: toolset
-    #image: savex13/toolset:latest
-    #image: registry.mirantis.com/osavatieiev/toolset:latest
-    #image: registry.mirantis.com/professional-services-qa/toolset:latest
-    image: registry.mirantis.com/professional-services-qa/toolset:23.3-antelope
+    image: registry.mirantis.com/professional-services-qa/toolset:24.2-antelope
   dnsPolicy: ClusterFirst
   volumes:
   - emptyDir: {}
diff --git a/k8s/yamls/qa-toolset.yaml b/k8s/yamls/qa-toolset.yaml
index 831dcac..3c4b421 100644
--- a/k8s/yamls/qa-toolset.yaml
+++ b/k8s/yamls/qa-toolset.yaml
@@ -63,15 +63,18 @@
         secretKeyRef:
           key: OS_DEFAULT_DOMAIN
           name: keystone-keystone-admin
+    - name: OS_CACERT
+      value: /etc/ssl/certs/openstack-ca-bundle.pem
     imagePullPolicy: IfNotPresent
     name: toolset
-    #image: 127.0.0.1:44301/general/external/docker.io/library/ubuntu:bionic-20201119
-    #image: savex13/toolset:latest
-    #image: registry.mirantis.com/professional-services-qa/toolset:latest
-    image: registry.mirantis.com/professional-services-qa/toolset:23.3-antelope
+    image: registry.mirantis.com/professional-services-qa/toolset:24.2-antelope
     volumeMounts:
     - mountPath: /artifacts
       name: qa-pv-a
+    - mountPath: /etc/ssl/certs/openstack-ca-bundle.pem
+      name: ca-cert-bundle
+      readOnly: true
+      subPath: ca_bundle
   dnsPolicy: ClusterFirst
   volumes:
   - emptyDir: {}
@@ -79,3 +82,7 @@
   - name: qa-pv-a
     persistentVolumeClaim:
       claimName: qa-pvc-a
+  - name: ca-cert-bundle
+    secret:
+      defaultMode: 420
+      secretName: keystone-ca-bundle
\ No newline at end of file