Open designate-mdns ports in firewall

For ha this is necessary so BIND servers on other nodes can request
zone transfers from mdns services that aren't on their local system.

Change-Id: Ia87be3b94eebedccadec2b2ff6d2687dcfb9d87a
(cherry picked from commit 93075ddfde)

puppet/services/designate-mdns.yaml

@@ -82,6 +82,15 @@ outputs:
               query:
                 read_default_file: /etc/my.cnf.d/tripleo.cnf
                 read_default_group: tripleo
+          tripleo.designate_mdns.firewall_rules:
+            '142 designate_mdns udp':
+              proto: 'udp'
+              dport:
+                - 5354
+            '143 designate_mdns tcp':
+              proto: 'tcp'
+              dport:
+                - 5354
         -
           if:
           - designate_workers_zero