Refactor firewall to listen on only on internal networks

[OpenStack Infra]

https://review.openstack.org/245184
commit 27b086f2123992e33cc8f22488d25abb647666c6
Author: Matthew Mosesohn <email address hidden>
Date: Fri Nov 13 17:38:25 2015 +0300

    Refactor firewall to listen on only on internal networks

    Refactors firewall rules to create source
    based rules that only permit connections
    from the management network for most services.

    The only services that should have public access
    are Horizon and OpenStack APIs. And from those,
    nova metadata and nova VNC should only be
    accessible internally. All other services should
    accept connections from private or storage
    networks.

    New defined type openstack::firewall::multi_net
    accepts firewall definitions with an array of
    source networks.

    New function prepare_firewall_rules creates a hash
    of firewall rules coming from an array of source
    networks.

    Removed unneeded openstack::firewall::allow class.
    Obsoleted openstack::firewall:vnc defined type.

    Sorted parameters on openstack::firewall and added
    docstrings

    DocImpact: TBD

    Change-Id: Ie63c01dcbd0bbd9adf17363b0db0b0a99b837b4e
    Closes-Bug: #1514014

[Olga Gusarenko (ogusarenko)]

Requires more investigation on what document it affects.