Open the iptables ports in the same way there are opened in the production opendev configuration. Do that in a pre-playbook and move some tasks into it for retryability. Change-Id: I992174aa3c7e47f9d2f70605172cd8b9460c53eb