In our current work with HA containers we started using 'docker_puppet_tasks' to create short-lived containers that spawn the necessary pacemaker resources (using puppet manifests).
The problem with docker_puppet_tasks is that it runs only on the role marked as primary controller or the first role listed. This does not work with composable HA, because we need to create pacemaker resource via puppet on the first node which has an HA service.
(Note that this is a bit more precise than saying "the first node of a specific role", because a service could theoretically be part of multiple roles and in that case we would potentially have two bootstrap nodes with the latter definition)
Maybe we should add a docker_puppet_tasks_all_nodes which will run on all nodes and on all roles and only the HA containers will make use of it?
Dan, I am throwing this over the fence for the time being. Let's chat about it