glance_file_pcmk_fstype: {get_param: GlanceFilePcmkFstype}
             glance_file_pcmk_manage: {get_param: GlanceFilePcmkManage}
             glance_file_pcmk_options: {get_param: GlanceFilePcmkOptions}
+            glance::api::manage_service: false
+            glance::api::enabled: false
       step_config: |
         include ::tripleo::profile::pacemaker::glance
 
     description: Role data for the Glance role.
     value:
       config_settings:
-        get_attr: [GlanceRegistryBase, role_data, config_settings]
+        map_merge:
+          - get_attr: [GlanceRegistryBase, role_data, config_settings]
+          - glance::registry::manage_service: false
+            glance::registry::enabled: false
       # No puppet manifests since glance-registry is included in
       # ::tripleo::profile::pacemaker::glance which is maintained alongside of
       # pacemaker/glance-api.yaml.
 
       config_settings:
         map_merge:
           - get_attr: [KeystoneServiceBase, role_data, config_settings]
-          #-
-          #  custom keystone hiera goes here if we need it!?
+          - keystone::manage_service: false
+            keystone::enabled: false
       step_config: |
         include ::tripleo::profile::pacemaker::keystone
 
         map_merge:
           - get_attr: [NeutronDhcpBase, role_data, config_settings]
           - tripleo::profile::pacemaker::neutron::enable_dhcp: True
+            neutron::agents::dhcp::enabled: false
+            neutron::agents::dhcp::manage_service: false
       step_config: |
         include ::tripleo::profile::pacemaker::neutron::dhcp