iptables_extra_allowed_hosts:
- protocol: tcp
port: 53
hostname: ns1.openstack.org
hostname: ns2.openstack.org