diff --git a/ansible/roles/ec2/sg_configure/tasks/main.yml b/ansible/roles/ec2/sg_configure/tasks/main.yml index 16ef2407..b7399adc 100644 --- a/ansible/roles/ec2/sg_configure/tasks/main.yml +++ b/ansible/roles/ec2/sg_configure/tasks/main.yml @@ -117,6 +117,14 @@ from_port: 22 to_port: 22 group_id: "{{ sg_bastion }}" + - proto: udp + from_port: 53 + to_port: 53 + group_id: "{{ sg_dock }}" + - proto: tcp + from_port: 53 + to_port: 53 + group_id: "{{ sg_dock }}" - proto: tcp from_port: 3100 to_port: 3100 @@ -153,14 +161,34 @@ from_port: 6783 to_port: 6783 group_id: "{{ sg_dock }}" + - proto: tcp + from_port: 8200 + to_port: 8200 + group_id: "{{ sg_dock }}" - proto: tcp from_port: 32768 to_port: 65535 group_id: "{{ sg_api }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_dock }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_hipache }}" - proto: tcp from_port: 32768 to_port: 65535 group_id: "{{ sg_navi }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_redis }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_services }}" - name: Hipache SG tags: @@ -209,6 +237,26 @@ from_port: 32768 to_port: 65535 group_id: "{{ sg_api }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_dock }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_hipache }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_redis }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_services }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_web }}" - name: MongoDB SG tags: @@ -241,6 +289,10 @@ from_port: 27000 to_port: 27020 group_id: "{{ sg_services }}" + - proto: tcp + from_port: 27000 + to_port: 27020 + group_id: "{{ sg_dock }}" - name: Navi SG tags: @@ -520,7 +572,15 @@ - proto: tcp from_port: 32768 to_port: 65535 - group_id: "{{ sg_hipache }}" + group_id: "{{ sg_dock }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_hipache }}" + - proto: tcp + from_port: 32768 + to_port: 63353 + group_id: "{{ sg_services }}" - name: Userland Hipache tags: @@ -625,3 +685,11 @@ from_port: 8500 to_port: 8500 group_id: "{{ sg_web }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_api }}" + - proto: tcp + from_port: 32768 + to_port: 65535 + group_id: "{{ sg_hipache }}"