iptables.sls

pgpool_zone:
  firewalld.present:
    - name: pgpool_zone
    - services:
      - pgpool
    - sources:
      - {{ slave_ip }}/32
    - watch_in:
      - service: start firewalld

pgpool:
  firewalld.service:
    - name: pgpool
    - ports:
      - 9898/tcp
      - 9000/tcp
      - 9694/tcp
    - watch_in:
      - service: start firewalld

start firewalld:
  service.running:
    - name: firewalld
    - enable: True
    - reload: True