Remove firewalld package declaration

This is now handle in the upstream openstack puppet module
Change mysql to use new override_options hash

The config_hash param becomes override_options. root_password is a
specific option now.
Galera back to functional for HA Controller / Juno

Caveats:
* ssl will not work (crt's are not included in galera rpm)
* do to lack of clustercheck, haproxy will not detect when
  a node loses quorum and should not receive requests
Update to use new mysql_* providers
Replace manage_service param with service_provider

NOTE: This MUST be fixed. The service provider needs to be something
other than undef.
Remove deprecated swift proxy params
create keystone heat role on just one HA node

to avoid an error message that the role already exists
Remove hamysql module as it is no longer used
Merge pull request #394 from bcrochet/juno-fixes

Juno fixes