infra: update firewall rules, add cluster_network for osds
infra: update firewall rules, add cluster_network for osds

At the moment, all daemons accept connections from 0.0.0.0.
We should at least restrict to public_network and add
cluster_network for OSDs.

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1541840

Signed-off-by: Guillaume Abrioux <30a9df5a0293a6108675377fa1673f7aa713f915@redhat.com>

fgal/ceph-ansible,ceph/ceph-ansible,ceph/ceph-ansible,fgal/ceph-ansible