add db-password to enforcer external-database block

CiscoDevNet · Jul 15, 2021 · e8fe64f · e8fe64f
1 parent 90551d6
commit e8fe64f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/samples/ra-vpn/redirector-lb/ravpn-enforcer-config.yaml b/samples/ra-vpn/redirector-lb/ravpn-enforcer-config.yaml
@@ -19,6 +19,7 @@ spec:
     - "mypkcs"
     - "redisca"
     - "userinfo"
+    - "sfcn-redis"
   cliLines: |
     interface Management0/0
      no management-only
@@ -78,6 +79,9 @@ spec:
     external-database
      host <your_redis_ip>
      port 6379
+      # this should match the token used for elasticache creation (EnforcerCacheAuthToken). If you omitted that field, then
+      # you should also omit the `db-password` line below.
+      db-password {{ index .secrets "sfcn-redis" "token" }}
      enable
     vpn load-balancing
      external-database