BZ #1157340 - need to rerun puppet to deploy heat on HA Controller

https://bugzilla.redhat.com/show_bug.cgi?id=1157340

Make sure dependent pacemaker services are really created within
quickstack::pacemaker::resource::service (so that other puppet
manifests may make the assumption the pacemaker resource exists after
a declaration of quickstack::pacemaker::resource::service).

(cherry picked from commit 96aa6e7539b301309fb93a0488034deb1418d692)
Remove firewalld package declaration

This is now handle in the upstream openstack puppet module
Change mysql to use new override_options hash

The config_hash param becomes override_options. root_password is a
specific option now.
Galera back to functional for HA Controller / Juno

Caveats:
* ssl will not work (crt's are not included in galera rpm)
* do to lack of clustercheck, haproxy will not detect when
  a node loses quorum and should not receive requests
Update to use new mysql_* types
Replace manage_service param with service_provider