From 8f9df085efb1549ca4d086b90f2427481b32ff59 Mon Sep 17 00:00:00 2001
From: Mikhail Vasilenko <mvasilenko@gmail.com>
Date: Sat, 16 Feb 2019 13:39:41 +0200
Subject: [PATCH] add rules for MongoDB cluster ports

---
 modules/mongodb/auto_values.tf | 2 +-
 rules.tf                       | 6 ++++--
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/modules/mongodb/auto_values.tf b/modules/mongodb/auto_values.tf
index f78408a1..5ffa670b 100644
--- a/modules/mongodb/auto_values.tf
+++ b/modules/mongodb/auto_values.tf
@@ -6,7 +6,7 @@
 variable "auto_ingress_rules" {
   description = "List of ingress rules to add automatically"
   type        = "list"
-  default     = ["mongodb-tcp"]
+  default     = ["mongodb-27017-tcp", "mongodb-27018-tcp", "mongodb-27019-tcp"]
 }
 
 variable "auto_ingress_with_self" {
diff --git a/rules.tf b/rules.tf
index 7cd61b17..3fc1d6e1 100644
--- a/rules.tf
+++ b/rules.tf
@@ -68,7 +68,9 @@ variable "rules" {
     memcached-tcp = [11211, 11211, "tcp", "Memcached"]
 
     # MongoDB
-    mongodb-tcp = [27017, 27017, "tcp", "MongoDB"]
+    mongodb-27017-tcp = [27017, 27017, "tcp", "MongoDB"]
+    mongodb-27018-tcp = [27018, 27018, "tcp", "MongoDB shard"]
+    mongodb-27019-tcp = [27019, 27019, "tcp", "MongoDB config server"]
 
     # MySQL
     mysql-tcp = [3306, 3306, "tcp", "MySQL/Aurora"]
@@ -258,7 +260,7 @@ variable "auto_groups" {
     }
 
     mongodb = {
-      ingress_rules     = ["mongodb-tcp"]
+      ingress_rules     = ["mongodb-27017-tcp", "mongodb-27018-tcp", "mongodb-27019-tcp"]
       ingress_with_self = ["all-all"]
       egress_rules      = ["all-all"]
     }