iptables_extra_allowed_hosts:
  - hostname: bridge.openstack.org
    port: 8125
    protocol: udp
  - hostname: opendev.org
    port: 8125
    protocol: udp

iptables_extra_allowed_groups:
  - {'protocol': 'udp', 'port': '8125', 'group': 'mirror-update'}
  - {'protocol': 'udp', 'port': '8125', 'group': 'nodepool'}
  - {'protocol': 'udp', 'port': '8125', 'group': 'zookeeper'}
  - {'protocol': 'udp', 'port': '8125', 'group': 'zuul'}