diff --git a/galera/server/cluster.yml b/galera/server/cluster.yml
index 1ab0aae..ba2a3ff 100644
--- a/galera/server/cluster.yml
+++ b/galera/server/cluster.yml
@@ -2,19 +2,3 @@
 - service.keepalived.cluster.single
 - service.haproxy.proxy.single
 - system.haproxy.proxy.listen.openstack.galera
-parameters:
-  galera:
-    clustercheck:
-      enabled: True
-      user: clustercheck
-      password: clustercheck
-      port: 9200
-      available_when_donor: 0
-      available_when_readonly: 0
-  mysql:
-    server:
-      users:
-      - name: clustercheck
-        password: clustercheck
-        database: '*.*'
-        grants: PROCESS
diff --git a/galera/server/clustercheck.yml b/galera/server/clustercheck.yml
new file mode 100644
index 0000000..a5d7137
--- /dev/null
+++ b/galera/server/clustercheck.yml
@@ -0,0 +1,18 @@
+parameters:
+  _param:
+    galera_clustercheck_password: clustercheck
+  galera:
+    clustercheck:
+      enabled: True
+      user: clustercheck
+      password: ${_param:galera_clustercheck_password}
+      port: 9200
+      available_when_donor: 0
+      available_when_readonly: 0
+  mysql:
+    server:
+      users:
+      - name: clustercheck
+        password: ${_param:galera_clustercheck_password}
+        database: '*.*'
+        grants: PROCESS