diff --git a/README.rst b/README.rst
index e9c2d30..8c0652a 100644
--- a/README.rst
+++ b/README.rst
@@ -423,6 +423,29 @@
           ossyslog:
             enabled: true
 
+Enable x509 and ssl communication between Glance and Galera cluster.
+---------------------
+By default communication between Glance and Galera is unsecure.
+
+glance:
+  server:
+    database:
+      x509:
+        enabled: True
+
+You able to set custom certificates in pillar:
+
+glance:
+  server:
+    database:
+      x509:
+        cacert: (certificate content)
+        cert: (certificate content)
+        key: (certificate content)
+
+You can read more about it here:
+    https://docs.openstack.org/security-guide/databases/database-access-control.html
+
 Usage
 =====
 
diff --git a/glance/server.sls b/glance/server.sls
index 214acff..b33e922 100644
--- a/glance/server.sls
+++ b/glance/server.sls
@@ -11,6 +11,7 @@
   - names: {{ server.pkgs }}
   - require_in:
     - sls: glance.db.offline_sync
+    - sls: glance._ssl.mysql
 
 {%- if not salt['user.info']('glance') %}
 glance_user: