diff --git a/roles/ocp4_workload_cert_manager/tasks/workload.yml b/roles/ocp4_workload_cert_manager/tasks/workload.yml
index b5cc115..17a8fbf 100644
--- a/roles/ocp4_workload_cert_manager/tasks/workload.yml
+++ b/roles/ocp4_workload_cert_manager/tasks/workload.yml
@@ -53,7 +53,7 @@
   register: r_cert_manager
 
 - name: Create ZeroSSL credentials secret for cert manager
-  when: ocp4_workload_cert_manager_provider == "zerossl"
+  when: ocp4_workload_cert_manager_provider == "zerossl" or ocp4_workload_cert_manager_provider_fallback | default("") == "zerossl"
   kubernetes.core.k8s:
     state: present
     template: secret-zerossl-credentials.yaml.j2