The v1 universal deploy path has no firewall-rule provisioning. The legacy v0 step path had an add_firewall_rule step (proxmox firewall.addRule), but the _universal play loop covers only networks, VMs/LXC and attachments. Firewall nodes drawn in the UI are therefore not provisioned by v1. Port firewall-rule provisioning into the universal path, or explicitly deprecate it. This is the one capability v1 does not yet cover, and it must be resolved before the orphaned v0 client path is removed (see range42-deployer-ui cleanup issue).
The v1 universal deploy path has no firewall-rule provisioning. The legacy v0 step path had an add_firewall_rule step (proxmox firewall.addRule), but the _universal play loop covers only networks, VMs/LXC and attachments. Firewall nodes drawn in the UI are therefore not provisioned by v1. Port firewall-rule provisioning into the universal path, or explicitly deprecate it. This is the one capability v1 does not yet cover, and it must be resolved before the orphaned v0 client path is removed (see range42-deployer-ui cleanup issue).