* firewall: stop using stdlib stages
* Configure galera-monitor on all controller nodes
* Add base constraint so gnocchi metricd is tied to core-clone