Manage backend firewall zone

Configure backend firewall zones if applicable. Allow all UDP for
cluster traffic.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

pillar/global/init.sls

@@ -26,6 +26,10 @@ firewalld:
     public:
       short: Public
       {{ firewall_interfaces(public) }}
+    {%- if backend | length %}
+    backend:
+      {{ firewall_interfaces(backend) }}
+    {%- endif %}
 {%- endif %}
 
 mine_functions:

pillar/role/ha-netcup.sls

@@ -0,0 +1,2 @@
+include:
+  - role.ha-node

pillar/role/ha-node.sls

@@ -0,0 +1,8 @@
+firewalld:
+  zones:
+    internal:
+      services:
+        - vrrp
+    backend:
+      protocols:
+        - udp