Use ensure_packages for things that include python-yaml

Puppet resource conflicts are stupid

Change-Id: I2b28980ffdaa712f0397b2a952e19e339adb4168