Neither - you should keep the `service` block, but then it needs to be followed by a `ruby_block` which waits for the cluster to go offline, similarly to how https://github.com/crowbar/barclamp-pacemaker/blob/release/roxy/master/chef/cookbooks/pacemaker/recipes/default.rb#L52 waits for it to go online.