Fix Designate worker conditional

It needs to be a separate entry in the map_merge arg list, not
combined with the other hieradata.

Change-Id: I54234fa880d2c86e23bc28ed904b8f372064575b

puppet/services/designate-worker.yaml

@@ -68,16 +68,16 @@ outputs:
       config_settings:
         map_merge:
         - get_attr: [DesignateBase, role_data, config_settings]
-        -
-          if:
-          - designate_workers_zero
-          - {}
-          - designate::worker::workers: {get_param: DesignateWorkers}
-          designate::worker::worker_notify: true
+        - designate::worker::worker_notify: true
           tripleo.bind.firewall_rules:
             '140 bind':
               dport:
                 - 53
                 - 953
+        -
+          if:
+          - designate_workers_zero
+          - {}
+          - designate::worker::workers: {get_param: DesignateWorkers}
       step_config: |
         include tripleo::profile::base::designate::worker