add puppetmaster firewall rules and role