---
os_firewall_allow:
- service: OpenShift kubelet
  port: 10250/tcp