Implement X.509 auth for MySQL and Ironic
Related-PROD: PROD-22747
Change-Id: I5fc208d97c09bace1543c88614d8141af70bc02f
diff --git a/README.rst b/README.rst
index 1beb5ac..0efe785 100644
--- a/README.rst
+++ b/README.rst
@@ -103,3 +103,37 @@
user: openstack
password: password
virtual_host: '/openstack'
+
+Enable x509 and ssl communication between Ironic and Galera cluster.
+---------------------
+By default communication between Ironic and Galera is unsecure.
+
+ironic:
+ api:
+ database:
+ x509:
+ enabled: True
+ conductor:
+ database:
+ x509:
+ enabled: True
+
+You able to set custom certificates in pillar:
+
+ironic:
+ api:
+ database:
+ x509:
+ cacert: (certificate content)
+ cert: (certificate content)
+ key: (certificate content)
+ conductor:
+ database:
+ x509:
+ cacert: (certificate content)
+ cert: (certificate content)
+ key: (certificate content)
+
+You can read more about it here:
+ https://docs.openstack.org/security-guide/databases/database-access-control.html
+