Fixes puppet re-runs on controller node. Tenant transition is not supported by puppet and will 'fail', workarounded to 'warn' and thus continues. Reason: With a keystone backend to ldap, a user's tenant id is not reported by keystone user-get (and it is a hack in sql, see extra column json blob in user SQL table); thus, transitions would happen all the time (even if they are in that tenant already).