- id: firewall
  type: puppet
  groups: [primary-controller, controller, cinder, cinder-vmware, compute, ceph-osd, zabbix-server, primary-mongo, mongo]
  required_for: [deploy_end]
  requires: [netconfig]
  parameters:
    puppet_manifest: /etc/puppet/modules/osnailyfacter/modular/firewall/firewall.pp
    puppet_modules: /etc/puppet/modules
    timeout: 3600
  test_pre:
    cmd: ruby /etc/puppet/modules/osnailyfacter/modular/firewall/firewall_pre.rb
  test_post:
    cmd: ruby /etc/puppet/modules/osnailyfacter/modular/firewall/firewall_post.rb