Wouldn't it be enough to drop the `include_recipe "pacemaker::haproxy"` and add it to the roles instead?