state iptables.rules may fail if grains_yaml is None Change-Id: Ibd59c33345f1af97267a7632d3e5b64d885c41e8