Commit bf00e67901 broke upgrades of existing
ironic deployments, as it tries running ironic-dbsync from "ironic" user,
while the existing ironic-dbsync.log file is owned by root.
This change adds creating a file resource with the correct ACLs before
running ironic-dbsync.
Change-Id: Ia3e8b7d8add933cd8a53f1c4e92dc3c4479009eb
(cherry picked from commit 179690bb93)