diff --git a/metadata/service/ssl/master.yml b/metadata/service/ssl/master.yml
new file mode 100644
index 0000000..178403f
--- /dev/null
+++ b/metadata/service/ssl/master.yml
@@ -0,0 +1,12 @@
+parameters:
+  _param:
+    mysql_ssl_key_file: /etc/mysql/ssl/key.pem
+    mysql_ssl_cert_file: /etc/mysql/ssl/cert.pem
+    mysql_ssl_ca_file: /etc/mysql/ssl/ca.pem
+  galera:
+    master:
+      ssl:
+        enabled: True
+        key_file: ${_param:mysql_ssl_key_file}
+        cert_file: ${_param:mysql_ssl_cert_file}
+        ca_file: ${_param:mysql_ssl_ca_file}
diff --git a/metadata/service/ssl/slave.yml b/metadata/service/ssl/slave.yml
new file mode 100644
index 0000000..6662e47
--- /dev/null
+++ b/metadata/service/ssl/slave.yml
@@ -0,0 +1,12 @@
+parameters:
+  _param:
+    mysql_ssl_key_file: /etc/mysql/ssl/key.pem
+    mysql_ssl_cert_file: /etc/mysql/ssl/cert.pem
+    mysql_ssl_ca_file: /etc/mysql/ssl/ca.pem
+  galera:
+    slave:
+      ssl:
+        enabled: True
+        key_file: ${_param:mysql_ssl_key_file}
+        cert_file: ${_param:mysql_ssl_cert_file}
+        ca_file: ${_param:mysql_ssl_ca_file}