Implement X.509 auth for MySQL and Keystone
Related-PROD: PROD-22748
Change-Id: I7d557bcb63f95a5f6afdc8d27fb2c6c5a7608362
diff --git a/README.rst b/README.rst
index a171ab2..7603911 100644
--- a/README.rst
+++ b/README.rst
@@ -845,6 +845,27 @@
Currently the default fernet rotation driver is a shared filesystem
+Enable x509 and ssl communication between Keystone and Galera cluster.
+---------------------
+By default communication between Keystone and Galera is unsecure.
+
+You able to set custom certificates in pillar:
+server:
+ database:
+ x509:
+ enabled: True
+
+keystone:
+ server:
+ database:
+ x509:
+ cacert (certificate content)
+ cert (certificate content)
+ key (certificate content)
+
+You can read more about it here:
+ https://docs.openstack.org/security-guide/databases/database-access-control.html
+
Documentation and Bugs
======================