commit 3f8520651e43e3c118118c7cf82cc4bb927cb033
author Oleksandr Shyshko <oshyshko@mirantis.com> Mon Sep 10 14:20:22 2018 +0300
committer Oleksandr Shyshko <oshyshko@mirantis.com> Mon Sep 10 15:02:35 2018 +0300
tree 07a8acfc929d1340706730bb7979a7aa20305d51
parent 63b2bc55e9dbe2984c5b4e88275b5d00cefdb4ae

Implement X.509 auth for MySQL and Panko

Related-PROD: PROD-22752

Change-Id: Ie81921548f67b0a6155d3101ee59eed845e95a58

README.rst

diff --git a/README.rst b/README.rst
index 1cceabc..f1b324d 100644
--- a/README.rst
+++ b/README.rst
@@ -94,6 +94,28 @@
           fluentd:
             enabled: true
 
+Enable x509 and ssl communication between Panko and Galera cluster.
+---------------------
+By default communication between Panko and Galera is unsecure.
+
+panko:
+  server:
+    database:
+      x509:
+        enabled: True
+
+You able to set custom certificates in pillar:
+
+panko:
+  server:
+    database:
+      x509:
+        cacert: (certificate content)
+        cert: (certificate content)
+        key: (certificate content)
+
+You can read more about it here:
+    https://docs.openstack.org/security-guide/databases/database-access-control.html
 
 More information
 ================