docker-registry: add missing firewall rules

... needed when the undercloud is containerized, since the overcloud
need access to the undercloud registry.

Change-Id: Idf55b14b79b9e3073a5f8caaa4a3c4634c3d3d7d

puppet/services/docker-registry.yaml

@@ -41,6 +41,11 @@ outputs:
           {get_param: [ServiceNetMap, DockerRegistryNetwork]}
         tripleo::profile::base::docker_registry::registry_port:
           {get_param: [EndpointMap, DockerRegistryInternal, port]}
+        tripleo.docker_registry.firewall_rules:
+          '155 docker-registry':
+            dport:
+              - 8787
+              - 13787
       step_config: |
         include ::tripleo::profile::base::docker_registry
       upgrade_tasks: