bundles/redis: support 'restrict-to'

bundles/redis/metadata.py

@@ -1,3 +1,5 @@
+from bundlewrap.metadata import atomic
+
 defaults = {
     'apt': {
         'packages': {
@@ -48,3 +50,16 @@ if node.has_bundle('telegraf'):
             },
         },
     }
+
+
+@metadata_reactor.provides(
+    'firewall/port_rules',
+)
+def firewall(metadata):
+    return {
+        'firewall': {
+            'port_rules': {
+                '6379/tcp': atomic(metadata.get('redis/restrict-to', {'*'})),
+            },
+        },
+    }