Improved firewall support

Add support for new firewalling in openstacklib (soon
to be moved to openstack_extras) that manages SSH and
other basic rules, along with improved dashboard
firewall management.

Change-Id: Ib95254fd98e19111463e7b0c4c2e38d89f7b83da

data/class_groups/firewall_compute.yaml

@@ -0,0 +1,5 @@
+classes:
+  - openstacklib::firewall
+  - openstacklib::firewall::base
+  - openstacklib::firewall::ssh
+  - openstacklib::firewall::compute

data/class_groups/firewall_control.yaml

@@ -1,5 +1,8 @@
 classes:
   - openstacklib::firewall
+  - openstacklib::firewall::base
+  - openstacklib::firewall::ssh
+  - openstacklib::firewall::memcached
   - openstacklib::firewall::nova
   - openstacklib::firewall::dhcp
   - openstacklib::firewall::keystone

data/data_mappings/scenario/stacktira.yaml

@@ -54,10 +54,7 @@ domain_name:
 deploy_control_firewall_source:
   - openstacklib::firewall::edeploy::source
   - openstacklib::firewall::puppet::source
-
-deploy_control_firewall_source:
-  - openstacklib::firewall::edeploy::source
-  - openstacklib::firewall::puppet::source
+  - openstacklib::firewall::ssh::source
 
 public_control_firewall_source:
   - openstacklib::firewall::cinder::source
@@ -74,7 +71,7 @@ private_control_firewall_source:
   - galera::firewall::source
   - openstacklib::firewall::cinder::internal_source
   - openstacklib::firewall::ceilometer::internal_source
-  - openstacklib::firewall::dashboard::internal_source
+  - openstacklib::firewall::memcached::source
   - openstacklib::firewall::glance::internal_source
   - openstacklib::firewall::heat::internal_source
   - openstacklib::firewall::keystone::internal_source

data/scenarios/stacktira.yaml

@@ -46,6 +46,7 @@ roles:
       - cinder_volume
       - ceilometer_compute
       - nova_compute_ml2
+      - firewall_compute
     classes:
       - openstacklib::repo
       - openstacklib::hosts