diff --git a/etc/openstack_deploy/user_secrets.yml b/etc/openstack_deploy/user_secrets.yml
index a48383db84..670a8ca2e7 100644
--- a/etc/openstack_deploy/user_secrets.yml
+++ b/etc/openstack_deploy/user_secrets.yml
@@ -82,7 +82,7 @@ heat_rabbitmq_password:
 
 ## Ironic options
 ironic_rabbitmq_password:
-ironic_galera_password:
+ironic_container_mysql_password:
 ironic_service_password:
 ironic_swift_temp_url_secret_key:
 
diff --git a/releasenotes/notes/ironic-update-mysql-password-variable-ec33f37ba6c4fac1.yaml b/releasenotes/notes/ironic-update-mysql-password-variable-ec33f37ba6c4fac1.yaml
new file mode 100644
index 0000000000..9f10fad9f3
--- /dev/null
+++ b/releasenotes/notes/ironic-update-mysql-password-variable-ec33f37ba6c4fac1.yaml
@@ -0,0 +1,16 @@
+---
+upgrade:
+  - |
+    The variable used to store the mysql password used by the ironic service
+    account has been changed.  The following variable:
+
+    .. code-block:: yaml
+
+       ironic_galera_password: secrete
+
+    has been changed to:
+
+    .. code-block:: yaml
+
+       ironic_container_mysql_password: secrete
+