* Move gnocchi upgrade and api to step 4
* Use correct manage_firewall hieradata
* Add cinder-backup profiles