Remove the iptables rules set via service_config_settings

This breaks the rules for the haproxy stats access because it
shadows them. Let's remove these rules and move the iptables
rules for haproxy in puppet-tripleo where they should have
been in the first place, like for all other services.

NB: Cherry pick is clean but had to be moved to
puppet/services/horizon.yaml instead of the docker/services/horizon.yaml
Depends-On: I1325171ef60d7a7e3b57373082fcdb5487be939b
Change-Id: I2f177c930567b3a45f0d95cec4140f478f14a074
Closes-Bug: #1829338
(cherry picked from commit 114e5778f9)
(cherry picked from commit 6b4f03f9ea)
(cherry picked from commit ff10e2f6b9)

puppet/services/horizon.yaml

@@ -165,11 +165,5 @@ outputs:
             - httpd_enabled.rc == 0
           service: name=httpd state=stopped
       service_config_settings:
-        haproxy:
-          tripleo.haproxy.firewall_rules:
-            '127 horizon':
-              dport:
-                - 80
-                - 443
         keystone:
           keystone_enable_member: true