From 0b5aa96100cd72142ab6280206e7bbcfb4a309bd Mon Sep 17 00:00:00 2001
From: Martin Magr <mmagr@redhat.com>
Date: Mon, 3 Jun 2013 12:44:46 +0200
Subject: [PATCH] Change firewall rules before main stage.

Change-Id: Idd2e19b6b2f53c9778e1dcde48c6e49e627e7091
Fixes: rhbz#965787
---
 packstack/puppet/templates/nova_compute.pp | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/packstack/puppet/templates/nova_compute.pp b/packstack/puppet/templates/nova_compute.pp
index 1eb3c30eb..c79295d87 100644
--- a/packstack/puppet/templates/nova_compute.pp
+++ b/packstack/puppet/templates/nova_compute.pp
@@ -1,3 +1,8 @@
+
+# Ensure Firewall changes happen before libvirt service start
+# preventing a clash with rules being set by libvirt
+Firewall <| |> -> Class['nova::compute::libvirt']
+
 if $::is_virtual_packstack == "true" {
     $libvirt_type = "qemu"
     nova_config{
@@ -67,4 +72,3 @@ exec {'tuned-virtual-host':
     command => '/usr/sbin/tuned-adm profile virtual-host',
     require => Service['tuned'],
 }
-