galera/server/database/x509/panko.yml

parameters:
  _param:
    mysql_panko_client_ssl_x509_subject: '/C=cz/CN=mysql-panko-client/L=Prague/O=Mirantis'
    mysql_panko_client_ssl_x509_issuer: '/C=cz/CN=Salt Master CA/L=Prague/O=Mirantis'
    mysql_panko_ssl_option:
      - SUBJECT: ${_param:mysql_panko_client_ssl_x509_subject}
      - ISSUER: ${_param:mysql_panko_client_ssl_x509_issuer}