Description of problem:
After updating to latest templates/container images, pacemaker fails to form the cluster back as firewalld is enabled due to the lack of this commit in our internal branch:


commit f4f2a900e711822f876a25a69a56624265591612
Author: fpantano <fpantano>
Date:   Wed Jul 31 20:30:32 2019 +0200

    ceph-base: Disable ceph-ansible firewall tasks
    
    TripleO already manages firewall rules so we don't need to have both
    enabled in the same time.
    It's currently not an issue because the firewall rules aren't apply by
    ceph-ansible on containerized deployment but it will be enabled soon.
    
    Change-Id: I2b8fc3fcf757e5a24696f2d3575fe696b9cdfdf0
    Co-Authored-By: Dimitri Savineau <dsavinea>
    (cherry picked from commit 954abc8e9b0920ef5cb7b0c997af3af0409d72b8)

Version-Release number of selected component (if applicable):
Latest

How reproducible:
Always

Steps to Reproduce:
1. Deploy rhosp14 latest 
2.
3.

Actual results:
pacemaker fails to reach a quorum

Expected results:
no failures.

Additional info:
I hit that issue with rhosp13 the other day but it looks like it's fixed in that version but not rhosp14.