Prevent keystone eventlet from starting

On debian based hosts, when a package is installed, the packager
has the service automatically start. This causes a problem,
especially in CI, where the eventlet doesnt quit fast enough
and apache is started but cant bind to port.

Change-Id: I6b07a70f0729639f12ebc19f9d3cd405d8be214b
Closes-Bug: 1569390
(cherry picked from commit 78ef8e9ad4)

manifests/init.pp

@@ -437,6 +437,11 @@
 #   the pool before it is closed.
 #   Defaults to undef.
 #
+# [*manage_policyrcd*]
+#   (optional) Whether to manage the policy-rc.d on debian based systems to
+#   prevent keystone eventlet from auto-starting on package install.
+#   Defaults to false
+#
 # == Dependencies
 #  None
 #
@@ -553,6 +558,7 @@ class keystone(
   $memcache_socket_timeout            = undef,
   $memcache_pool_maxsize              = undef,
   $memcache_pool_unused_timeout       = undef,
+  $manage_policyrcd                   = false,
   # DEPRECATED PARAMETERS
   $admin_workers                      = max($::processorcount, 2),
   $public_workers                     = max($::processorcount, 2),
@@ -867,6 +873,12 @@ class keystone(
     'eventlet_server/public_workers': value => $public_workers;
   }
 
+  if $manage_policyrcd {
+    # openstacklib::policyrcd only affects debian based systems.
+    class { '::openstacklib::policyrcd': services => ['keystone'] }
+    Class['::openstacklib::policyrcd'] -> Package['keystone']
+  }
+
   if $manage_service {
     if $enabled {
       $service_ensure = 'running'