[openstack] document ports required for CF