Problem that, this drbd_primitive is starting with unclean state is, that `pacemaker_primitive drbd_primitive` and `pacemaker_ms ms_name` are created one after another and in different sessions, they are confirmed by other `commit`. What is needed to setup this service in clean state is:
    # crm configure
    crm/conf > edit
    primitive drbd_pgsql \
      ocf:linbit:drbd \
      params drbd_resource="pgsql" \
      op start interval="0s" timeout="60s" on-fail="restart" \
      op monitor interval="3s" timeout="60s" on-fail="restart" \
      op monitor interval="2s" role="Master" timeout="60s" on-fail="restart" \
      op monitor interval="4s" role="Slave" timeout="60s" on-fail="restart" \
      op promote interval="0s" timeout="60s" on-fail="restart" \
      op demote interval="0s" timeout="60s" on-fail="stop" \
      op stop interval="0s" timeout="60s" on-fail="block" \
      op notify interval="0s" timeout="60s"
    ms ms_drbd_pgsql drbd_pgsql \
      meta master-max="1" master-node-max="1" clone-max="2" \
      clone-node-max="1" notify="true"
    crm/conf > commit
    crm > exit