Comment 4 for bug 1597753

For the record, RDO packaging provides virtual packages. Puppet 3 is
setting allow_virtual to False. This cause idempotency problem and
raises this kind of error

     1) keystone server running with Apache/WSGI as Identity Provider default parameters should work with no errors
        Failure/Error: apply_manifest(pp, :catch_changes => true)
        Beaker::Host::CommandFailure:
          Host 'centos-70-x64' exited with 2 running:
           puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest.pp.7Lg1Xu
          Last 10 lines of output were:
           [0;32mInfo: Loading facts[0m
           [0;32mInfo: Loading facts[0m
           [0;32mInfo: Loading facts[0m
           [0;32mInfo: Loading facts[0m
           [0;32mInfo: Loading facts[0m
           [0;32mInfo: Loading facts[0m
           [mNotice: Compiled catalog for centos-7-rax-dfw-2116183 in environment production in 5.55 seconds[0m
           [0;32mInfo: Applying configuration version '1467281188'[0m
           [mNotice: /Stage[main]/Keystone::Federation::Identity_provider/Package[python-pysaml2]/ensure: created[0m
           [mNotice: Finished catalog run in 57.53 seconds[0m

where the package is installed again.