net-ops/global/overlay/etc/puppet/modules/net/manifests/open_1022.pp

class net::open_1022 {

  $mgmt_addresses = hiera_array('mgmt_addresses',[])

  sunet::nftables::allow { 'allow_ssh_1022':
   from => $mgmt_addresses,
   port => '1022',
   proto =>  'tcp'
  }
}