Firewall Module - Allow Minions to connect to salt

salt/firewall/init.sls

@@ -1,4 +1,3 @@
-{% set minions = salt['pillar.get']('firewall.minions', {}) %}
 # Default Rules for everyone
 
 # Keep localhost in the game
@@ -53,6 +52,7 @@ enable_reject_policy:
 
 # Rules if you are a Master
 {% if grains['role'] == 'so-master' %}
+{% set minions = salt['pillar.get']('firewall.minions', {}) %}
 {% for ip in minions.get('minion_ips', []) %}
 
 enable_salt_minions_4505:
@@ -74,7 +74,9 @@ enable_reject_policy:
     - source: {{ ip }}
     - dport: 4506
     - save: True
+
 {% endfor %}
+
 {% endif %}
 
 # Rules if you are a Storage Node