diff --git a/ansible/roles/common/templates/conf/input/11-letsencrypt.conf.j2 b/ansible/roles/common/templates/conf/input/11-letsencrypt.conf.j2
index ad2f071028336e8f70f60a087f5a49ec93102139..6ebd7b164c9377b5728ee71852547a9bc622126f 100644
--- a/ansible/roles/common/templates/conf/input/11-letsencrypt.conf.j2
+++ b/ansible/roles/common/templates/conf/input/11-letsencrypt.conf.j2
@@ -2,7 +2,7 @@
   @type tail
   @log_level debug
   path /var/log/kolla/letsencrypt/letsencrypt-lego.log
-  pos_file /var/run/td-agent/letsencrypt.pos
+  pos_file /var/run/{{ fluentd_user }}/letsencrypt.pos
   tag infra.letsencrypt.lego
   enable_watch_timer false
   <parse>
diff --git a/zuul.d/base.yaml b/zuul.d/base.yaml
index d33ee7313c67902da76f0aac3838a5c4abaf2a3a..df84860f3c80739eccd9ccc391e5d1897417c979 100644
--- a/zuul.d/base.yaml
+++ b/zuul.d/base.yaml
@@ -282,6 +282,7 @@
     voting: false
     files:
       - ^requirements-core.yml
+      - ^ansible/roles/common/templates/conf/input/11-letsencrypt.conf.j2
       - ^ansible/roles/letsencrypt/
       - ^ansible/roles/loadbalancer/
       - ^tests/test-core-openstack.sh