For a supported pacemaker cluster stonith is expected to be configured so that auto recovery is possible .
Many a times customer does not opt this as there is no reference of this in RHOS docs .
Some times customer dont configure as they dont want so much sofistication or dont have highly reliable network or a fence device for such configuration .
Nevertheless auto recover feature is expected for a Red Hat supported cluster .

>> This information needs to be added in following doc:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/10/html-single/understanding_red_hat_openstack_platform_high_availability/

Here is some information that needs to be added :
1)
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/High_Availability_Add-On_Administration/index.html
1.3. FENCING CONFIGURATION

You must configure a fencing device for each node in the cluster. For general information about configuring fencing devices, see the Red Hat Enterprise Linux 7 High Availability Add-On Reference.

2)
https://access.redhat.com/solutions/15575
Fencing Requirements
For RHEL 6 and RHEL 7 High Availability Clusters with pacemaker, you must have the cluster property stonith-enabled set to true. Even with devices configured, if stonith-enabled is false, these devices will not be used and the configuration is functionally equivalent to not having any fence devices at all.

3)
Auto recovery cannot be expected without stonith configuration .
This bug should be cloned for all versions RHOS7-RHOS11 & future .