diff --git a/puppet/hieradata/controller.yaml b/puppet/hieradata/controller.yaml
index 7581a52c87..7633594367 100644
--- a/puppet/hieradata/controller.yaml
+++ b/puppet/hieradata/controller.yaml
@@ -297,3 +297,12 @@ tripleo::firewall::firewall_rules:
     dport:
       - 8041
       - 13041
+  '130 pacemaker tcp':
+    proto: 'tcp'
+    dport:
+      - 2224
+      - 3121
+      - 21064
+  '131 pacemaker udp':
+    proto: 'udp'
+    dport: 5405