# This is an example of custom firewall rules that one could apply for specific
# roles.

parameter_defaults:

# This firewall rule will authorize 12345/tcp from localhost on all the nodes
# in the overcloud:
#  ExtraFirewallRules:
#    '301 allow arbitrary tcp rule':
#      dport: 12345
#      proto: tcp
#      source: 127.0.0.1
#      action: insert

# This firewall rule will authorize 12345/tcp from localhost on all the
# compute nodes:
#  ComputeParameters:
#    ExtraFirewallRules:
#      '301 allow arbitrary tcp rule':
#        dport: 12345
#        proto: tcp
#        source: 127.0.0.1
#        action: insert