* Fixes missing haproxy firewall rules for OpenDaylight
* Add base constraint so gnocchi metricd is tied to core-clone