diff --git a/manifests/deps.pp b/manifests/deps.pp
index 30c29528a..e0265fe3e 100644
--- a/manifests/deps.pp
+++ b/manifests/deps.pp
@@ -79,4 +79,9 @@ class keystone::deps {
   # Installation or config changes will always restart services.
   Anchor['keystone::install::end'] ~> Anchor['keystone::service::begin']
   Anchor['keystone::config::end']  ~> Anchor['keystone::service::begin']
+
+  # Install the package before the Apache module purges wsgi-keystone.conf.
+  # Otherwise, the run isn't indempotent.
+  Package<| tag == 'keystone-package'|> -> File<| title == '/etc/apache2/sites-enabled' |>
+  Package<| tag == 'keystone-package'|> -> File<| title == '/etc/apache2/sites-available' |>
 }