[REFACTOR] Implement X.509 auth for MySQL and Keystone
Change-Id: I501e26fbc3aca3cba0d27c7541141fb9cb8b9022
Related-PROD: PROD-22748
diff --git a/README.rst b/README.rst
index 7603911..0239d03 100644
--- a/README.rst
+++ b/README.rst
@@ -849,19 +849,21 @@
---------------------
By default communication between Keystone and Galera is unsecure.
+keystone:
+ server:
+ database:
+ x509:
+ enabled: True
+
You able to set custom certificates in pillar:
-server:
- database:
- x509:
- enabled: True
keystone:
server:
database:
x509:
- cacert (certificate content)
- cert (certificate content)
- key (certificate content)
+ cacert: (certificate content)
+ cert: (certificate content)
+ key: (certificate content)
You can read more about it here:
https://docs.openstack.org/security-guide/databases/database-access-control.html