openshift.ks: Stop using lokkit

Declare firewall_allow as an associative array at the bottom of
openshift.ks.  Set protocol:port rules (e.g., udp:53) in this associative
array wherever previously lokkit was used.

Add configure_firewall function, which disables lokkit and writes a basic
ruleset to /etc/sysconfig/iptables.

Add configure_firewall_add_rules, which iterates over ${firewall_allow[@]}
and adds ACCEPT rules to /etc/sysconfig/iptables for the rules defined in
${firewall_allow[@]}.

configure_host: Call configure_firewall.

configure_openshift: Call configure_firewall_add_rules.

restart_services: Restart the iptables service to pick up rules added to
/etc/sysconfig/iptables.

This commit fixes bug 1067794.
openshift.ks: Regenerate valid_settings

Regenerate valid_settings using the documented command in order to restore
ordering and avoid noise with future changes that use the same command.
openshift.ks: CONF_ABORT_ON_UNRECOGNIZED_SETTINGS

Add the abort_on_unrecognized_settings/CONF_ABORT_ON_UNRECOGNIZED_SETTINGS
setting, which defaults to true and causes the installation script to abort
if an unrecognized setting is specified if enabled or causes the
installation script only to warn about unrecognized settings if disabled.

Make parse_kernel_cmdline set an overriding default value of
CONF_ABORT_ON_UNRECOGNIZED_SETTINGS=false so that kickstart scripts do not
abort because of kernel command-line arguments that are unrelated to the
installation script.

This commit fixes bug 1114519.
Merge pull request #396 from Miciah/bug-1114519-only-warn-about-unrecognized-kernel-command-line-args

openshift.ks: CONF_ABORT_ON_UNRECOGNIZED_SETTINGS
Merge pull request #390 from Miciah/bug-1067794-eliminate-use-of-lokkit

openshift.ks: Stop using lokkit