diff --git a/manifests/init.pp b/manifests/init.pp
index 9da78a05a..4235c9c6a 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -515,6 +515,11 @@
 #   (optional) Specify the keystone system group to be used with keystone-manage.
 #   Defaults to 'keystone'
 #
+# [*manage_policyrcd*]
+#   (optional) Whether to manage the policy-rc.d on debian based systems to
+#   prevent keystone eventlet from auto-starting on package install.
+#   Defaults to false
+#
 # DEPRECATED PARAMETERS
 #
 # [*service_provider*]
@@ -648,6 +653,7 @@ class keystone(
   $domain_config_directory              = '/etc/keystone/domains',
   $keystone_user                        = $::keystone::params::keystone_user,
   $keystone_group                       = $::keystone::params::keystone_group,
+  $manage_policyrcd                     = false,
   # DEPRECATED PARAMETERS
   $admin_workers                        = max($::processorcount, 2),
   $public_workers                       = max($::processorcount, 2),
@@ -869,6 +875,12 @@ class keystone(
     'eventlet_server/public_workers': value => $public_workers;
   }
 
+  if $manage_policyrcd {
+    # openstacklib::policyrcd only affects debian based systems.
+    class { '::openstacklib::policyrcd': services => ['keystone'] }
+    Class['::openstacklib::policyrcd'] -> Package['keystone']
+  }
+
   if $manage_service {
     if $enabled {
       $service_ensure = 'running'
diff --git a/releasenotes/notes/policy_rc_d_keystone_eventlet-2dc65eb3d27f8969.yaml b/releasenotes/notes/policy_rc_d_keystone_eventlet-2dc65eb3d27f8969.yaml
new file mode 100644
index 000000000..4408d94de
--- /dev/null
+++ b/releasenotes/notes/policy_rc_d_keystone_eventlet-2dc65eb3d27f8969.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - Provides bool to determine if policy-rc.d should be managed
+    for keystone eventlet service.
+issues:
+  - Keystone eventlet service is auto-started on debian based
+    systems on package install.