percona xtradb cluster Ошибка подключения нод к мастеру

Пробую запустить кластер в докере с помощью docker-compose

Следовал инструкции https://www.percona.com/doc/percona-xtradb-cluster/LATEST/install/docker.html

Мастер нода (насколько я понимаю это мастер нода) поднимается и работает, я могу к ней подключиться, а вот две другие падают с ошибкой

2021-12-17T08:06:01.005660Z 0 [ERROR] [MY-000000] [Galera] handshake with remote endpoint ssl://172.22.0.2:4567 failed: asio.ssl:67567754: 'invalid padding' ( 67567754: 'error:0407008A:rsa routines:RSA_padding_check_PKCS1_type_1:invalid padding')
This error is often caused by SSL issues. For more information, please see:
  https://per.co.na/pxc/encrypt_cluster_traffic

Вот конфиг docker-compose.yml

version: "3"

services:

  percona-master:
    container_name: percona-master
    image: percona/percona-xtradb-cluster:8.0
    environment:
      MYSQL_ROOT_PASSWORD: root
      CLUSTER_NAME: pxc-cluster
    volumes:
      - ./service/volumes/percona/config:/etc/percona-xtradb-cluster.conf.d
      - ./service/volumes/percona/cert:/cert
    networks:
      - pxc-network

  percona-slave-read:
    container_name: percona-slave-read
    image: percona/percona-xtradb-cluster:8.0
    environment:
      MYSQL_ROOT_PASSWORD: root
      CLUSTER_NAME: pxc-cluster
      CLUSTER_JOIN: percona-master
    volumes:
      - ./service/volumes/percona/config:/etc/percona-xtradb-cluster.conf.d
      - ./service/volumes/percona/cert:/cert
    networks:
      - pxc-network
    depends_on:
      - percona-master

  percona-slave-search:
    container_name: percona-slave-search
    image: percona/percona-xtradb-cluster:8.0
    environment:
      MYSQL_ROOT_PASSWORD: root
      CLUSTER_NAME: pxc-cluster
      CLUSTER_JOIN: percona-master
    volumes:
      - ./service/volumes/percona/config:/etc/percona-xtradb-cluster.conf.d
      - ./service/volumes/percona/cert:/cert
    networks:
      - pxc-network
    depends_on:
      - percona-master

networks:
  pxc-network:
    name: pxc-network

Конфиг custom.cnf

[mysqld]
ssl-ca = /cert/ca.pem
ssl-cert = /cert/server-cert.pem
ssl-key = /cert/server-key.pem

[client]
ssl-ca = /cert/ca.pem
ssl-cert = /cert/client-cert.pem
ssl-key = /cert/client-key.pem

[sst]
encrypt = 4
ssl-ca = /cert/ca.pem
ssl-cert = /cert/server-cert.pem
ssl-key = /cert/server-key.pem