diff --git a/README.rst b/README.rst
index 8817d0a..8ad30f3 100644
--- a/README.rst
+++ b/README.rst
@@ -249,6 +249,27 @@
           ossyslog:
             enabled: true
 
+Enable x509 and ssl communication between Heat and Galera cluster.
+---------------------
+By default communication between Heat and Galera is unsecure.
+
+You able to set custom certificates in pillar:
+server:
+  database:
+    x509:
+      enabled: True
+
+heat:
+  server:
+    database:
+      x509:
+        cacert (certificate content)
+        cert (certificate content)
+        key (certificate content)
+
+You can read more about it here:
+    https://docs.openstack.org/security-guide/databases/database-access-control.html
+
 Documentation and Bugs
 ======================