diff --git a/roles/ceph-infra/tasks/configure_firewall.yml b/roles/ceph-infra/tasks/configure_firewall.yml
index acf730097..13c6b074f 100644
--- a/roles/ceph-infra/tasks/configure_firewall.yml
+++ b/roles/ceph-infra/tasks/configure_firewall.yml
@@ -13,6 +13,12 @@
       or is_atomic | bool)
   tags: firewall
   block:
+    - name: install firewalld python binding
+      package:
+        name: "python{{ ansible_python.version.major }}-firewall"
+      tags: with_pkg
+      when: not is_atomic | bool
+
     - name: start firewalld
       service:
         name: firewalld