Add flag for unbound's resolv.conf

diskimage-builder does not run services that it installs, but this
is a problem when we lay down the resolv.conf file in puppet with
the service not running. So, put in a flag which defaults to true
(which is current behavior) that a dib invocation of the puppet
can turn off and then dib can plop the file down at the end of the
process.

Change-Id: I05d89ffacfdaf3563b8cb1460af12f114e1a0340

modules/openstack_project/manifests/single_use_slave.pp

@@ -9,6 +9,7 @@
 class openstack_project::single_use_slave (
   $certname = $::fqdn,
   $install_users = true,
+  $install_resolv_conf = true,
   $sudo = false,
   $bare = true,
   $python3 = false,
@@ -21,6 +22,7 @@ class openstack_project::single_use_slave (
     certname            => $certname,
     automatic_upgrades  => $automatic_upgrades,
     install_users       => $install_users,
+    install_resolv_conf => $install_resolv_conf,
     iptables_rules4     =>
       [
         # Ports 69 and 6385 allow to allow ironic VM nodes to reach tftp and

modules/openstack_project/manifests/template.pp

@@ -8,6 +8,7 @@ class openstack_project::template (
   $iptables_rules4           = [],
   $iptables_rules6           = [],
   $install_users = true,
+  $install_resolv_conf = true,
   $automatic_upgrades = true,
   $certname = $::fqdn
 ) {
@@ -43,7 +44,9 @@ class openstack_project::template (
     ensure => present,
   }
 
-  class { 'unbound': }
+  class { 'unbound':
+    install_resolv_conf => $install_resolv_conf
+  }
 
   if $::osfamily == 'Debian' {
     # Make sure dig is installed

modules/unbound/manifests/init.pp

@@ -18,6 +18,7 @@
 # recursive resolver.
 
 class unbound (
+  $install_resolv_conf = true
 ) {
 
   if ($::osfamily == 'Debian') {
@@ -62,6 +63,7 @@ class unbound (
     }
   }
 
+  if ($install_resolv_conf) {
     # Rackspace uses static config files
     file { '/etc/resolv.conf':
       content => "nameserver 127.0.0.1\n",
@@ -70,6 +72,7 @@ class unbound (
       mode    => '0444',
       require => Service['unbound'],
     }
+  }
 
   service { 'unbound':
     ensure     => running,