diff --git a/roles/keycloak/tasks/main.yml b/roles/keycloak/tasks/main.yml
index 1e3c668..f10ffa3 100644
--- a/roles/keycloak/tasks/main.yml
+++ b/roles/keycloak/tasks/main.yml
@@ -108,4 +108,4 @@
     login_host: "{{ _pxc_service.resources[0].spec.clusterIP }}"
     login_user: root
     login_password: "{{ openstack_helm_endpoints.oslo_db.auth.admin.password }}"
-    query: "set global pxc_strict_mode='ENFORCING'"
+    query: "set global pxc_strict_mode='MASTER'"
diff --git a/roles/percona_xtradb_cluster/vars/main.yml b/roles/percona_xtradb_cluster/vars/main.yml
index c21d748..f283983 100644
--- a/roles/percona_xtradb_cluster/vars/main.yml
+++ b/roles/percona_xtradb_cluster/vars/main.yml
@@ -12,6 +12,7 @@
       max_allowed_packet=16M
       # Skip reverse DNS lookup of clients
       skip-name-resolve
+      pxc_strict_mode=MASTER
     sidecars:
       - name: exporter
         image: "{{ atmosphere_images['prometheus_mysqld_exporter'] | vexxhost.kubernetes.docker_image('ref') }}"