diff --git a/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-2 b/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-2
index f477e2190e..0b92bb5e1c 100644
--- a/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-2
+++ b/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-2
@@ -1,26 +1,26 @@
 <cib crm_feature_set="3.19.7" validate-with="pacemaker-4.0" epoch="8" num_updates="0" admin_epoch="0" original="1">
   <configuration original="1">
     <!-- The essential elements of this test are:
          * There are three bundle resource with masters attributes (one with
            each type of container).
 
          In this situation, the masters attribute should be replaced with a
          promoted-max attribute with the same value.
       -->
     <crm_config original="1"/>
     <nodes original="1"/>
     <resources original="1">
       <bundle id="bundle1" original="1">
-        <docker image="alpine:latest" masters="2" run-command="sleep 60" original="1"/>
+        <docker image="alpine:latest" promoted-max="2" run-command="sleep 60" original="1"/>
       </bundle>
       <bundle id="bundle2" original="1">
-        <podman image="alpine:latest" masters="2" run-command="sleep 60" original="1"/>
+        <podman image="alpine:latest" promoted-max="2" run-command="sleep 60" original="1"/>
       </bundle>
       <bundle id="bundle3" original="1">
-        <rkt image="alpine:latest" masters="2" run-command="sleep 60" original="1"/>
+        <rkt image="alpine:latest" promoted-max="2" run-command="sleep 60" original="1"/>
       </bundle>
     </resources>
     <constraints original="1"/>
   </configuration>
   <status original="1"/>
 </cib>
diff --git a/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-3 b/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-3
index f477e2190e..0b92bb5e1c 100644
--- a/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-3
+++ b/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-3
@@ -1,26 +1,26 @@
 <cib crm_feature_set="3.19.7" validate-with="pacemaker-4.0" epoch="8" num_updates="0" admin_epoch="0" original="1">
   <configuration original="1">
     <!-- The essential elements of this test are:
          * There are three bundle resource with masters attributes (one with
            each type of container).
 
          In this situation, the masters attribute should be replaced with a
          promoted-max attribute with the same value.
       -->
     <crm_config original="1"/>
     <nodes original="1"/>
     <resources original="1">
       <bundle id="bundle1" original="1">
-        <docker image="alpine:latest" masters="2" run-command="sleep 60" original="1"/>
+        <docker image="alpine:latest" promoted-max="2" run-command="sleep 60" original="1"/>
       </bundle>
       <bundle id="bundle2" original="1">
-        <podman image="alpine:latest" masters="2" run-command="sleep 60" original="1"/>
+        <podman image="alpine:latest" promoted-max="2" run-command="sleep 60" original="1"/>
       </bundle>
       <bundle id="bundle3" original="1">
-        <rkt image="alpine:latest" masters="2" run-command="sleep 60" original="1"/>
+        <rkt image="alpine:latest" promoted-max="2" run-command="sleep 60" original="1"/>
       </bundle>
     </resources>
     <constraints original="1"/>
   </configuration>
   <status original="1"/>
 </cib>
diff --git a/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-99 b/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-99
index b3ad59f7ab..732082bf80 100644
--- a/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-99
+++ b/cts/schemas/test-3/ref/bundle-promoted-max-legacy.ref-99
@@ -1,26 +1,26 @@
 <cib crm_feature_set="3.19.7" validate-with="pacemaker-4.0" epoch="8" num_updates="0" admin_epoch="0">
   <configuration>
     <!-- The essential elements of this test are:
          * There are three bundle resource with masters attributes (one with
            each type of container).
 
          In this situation, the masters attribute should be replaced with a
          promoted-max attribute with the same value.
       -->
     <crm_config/>
     <nodes/>
     <resources>
       <bundle id="bundle1">
-        <docker image="alpine:latest" masters="2" run-command="sleep 60"/>
+        <docker image="alpine:latest" promoted-max="2" run-command="sleep 60"/>
       </bundle>
       <bundle id="bundle2">
-        <podman image="alpine:latest" masters="2" run-command="sleep 60"/>
+        <podman image="alpine:latest" promoted-max="2" run-command="sleep 60"/>
       </bundle>
       <bundle id="bundle3">
-        <rkt image="alpine:latest" masters="2" run-command="sleep 60"/>
+        <rkt image="alpine:latest" promoted-max="2" run-command="sleep 60"/>
       </bundle>
     </resources>
     <constraints/>
   </configuration>
   <status/>
 </cib>
diff --git a/xml/resources-4.0.rng b/xml/resources-4.0.rng
index d77954c4f7..726f8c493b 100644
--- a/xml/resources-4.0.rng
+++ b/xml/resources-4.0.rng
@@ -1,389 +1,380 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <grammar xmlns="http://relaxng.org/ns/structure/1.0"
          datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
   <start>
     <ref name="element-resources"/>
   </start>
 
   <!--
    Include rule definitions so that we can override element-nvset.rule based on
    context
    -->
   <include href="rule-4.0.rng">
     <start combine="choice">
       <notAllowed/>
     </start>
   </include>
 
   <define name="element-resources">
     <element name="resources">
       <zeroOrMore>
         <choice>
           <ref name="element-primitive"/>
           <ref name="element-template"/>
           <ref name="element-group"/>
           <ref name="element-clone"/>
           <ref name="element-bundle"/>
         </choice>
       </zeroOrMore>
     </element>
   </define>
 
   <define name="element-primitive">
     <element name="primitive">
       <interleave>
         <attribute name="id"><data type="ID"/></attribute>
         <choice>
           <group>
             <ref name="element-resource-class"/>
             <attribute name="type"><text/></attribute>
           </group>
           <attribute name="template"><data type="IDREF"/></attribute>
         </choice>
         <optional>
           <attribute name="description"><text/></attribute>
         </optional>
         <ref name="element-resource-extra.primitive-template"/>
         <ref name="element-operations"/>
       </interleave>
     </element>
   </define>
 
   <define name="element-template">
     <element name="template">
       <interleave>
         <attribute name="id"><data type="ID"/></attribute>
         <ref name="element-resource-class"/>
         <attribute name="type"><text/></attribute>
         <optional>
           <attribute name="description"><text/></attribute>
         </optional>
         <ref name="element-resource-extra.primitive-template"/>
         <ref name="element-operations"/>
       </interleave>
     </element>
   </define>
 
   <define name="element-bundle">
     <element name="bundle">
       <interleave>
         <attribute name="id"><data type="ID"/></attribute>
         <optional>
           <attribute name="description"><text/></attribute>
         </optional>
         <ref name="element-resource-extra"/>
         <choice>
           <element name="docker">
             <attribute name="image"><text/></attribute>
             <optional>
               <attribute name="replicas"><data type="integer"/></attribute>
             </optional>
             <optional>
               <attribute name="replicas-per-host"><data type="integer"/></attribute>
             </optional>
             <optional>
-              <choice>
-                <attribute name="masters"><data type="integer"/></attribute>
-                <attribute name="promoted-max"><data type="integer"/></attribute>
-              </choice>
+              <attribute name="promoted-max"><data type="integer"/></attribute>
             </optional>
             <optional>
               <attribute name="run-command"> <text/></attribute>
             </optional>
             <optional>
               <attribute name="network"><text/></attribute>
             </optional>
             <optional>
               <attribute name="options"><text/></attribute>
             </optional>
           </element>
 
           <!-- @COMPAT rkt containers in bundles are deprecated since 2.1.8 -->
           <element name="rkt">
             <attribute name="image"><text/></attribute>
             <optional>
               <attribute name="replicas"><data type="integer"/></attribute>
             </optional>
             <optional>
               <attribute name="replicas-per-host"><data type="integer"/></attribute>
             </optional>
             <optional>
-              <choice>
-                <attribute name="masters"><data type="integer"/></attribute>
-                <attribute name="promoted-max"><data type="integer"/></attribute>
-              </choice>
+              <attribute name="promoted-max"><data type="integer"/></attribute>
             </optional>
             <optional>
               <attribute name="run-command"> <text/></attribute>
             </optional>
             <optional>
               <attribute name="network"><text/></attribute>
             </optional>
             <optional>
               <attribute name="options"><text/></attribute>
             </optional>
           </element>
           <element name="podman">
             <attribute name="image"><text/></attribute>
             <optional>
               <attribute name="replicas"><data type="integer"/></attribute>
             </optional>
             <optional>
               <attribute name="replicas-per-host"><data type="integer"/></attribute>
             </optional>
             <optional>
-              <choice>
-                <attribute name="masters"><data type="integer"/></attribute>
-                <attribute name="promoted-max"><data type="integer"/></attribute>
-              </choice>
+              <attribute name="promoted-max"><data type="integer"/></attribute>
             </optional>
             <optional>
               <attribute name="run-command"> <text/></attribute>
             </optional>
             <optional>
               <attribute name="network"><text/></attribute>
             </optional>
             <optional>
               <attribute name="options"><text/></attribute>
             </optional>
           </element>
         </choice>
         <optional>
           <element name="network">
             <optional>
               <attribute name="ip-range-start"><text/></attribute>
             </optional>
             <optional>
               <attribute name="control-port"><data type="integer"/></attribute>
             </optional>
             <optional>
               <attribute name="host-interface"><text/></attribute>
             </optional>
             <optional>
               <attribute name="host-netmask"><data type="integer"/></attribute>
             </optional>
             <optional>
               <attribute name="add-host"><data type="boolean"/></attribute>
             </optional>
             <zeroOrMore>
               <element name="port-mapping">
                 <attribute name="id"><data type="ID"/></attribute>
                 <choice>
                   <group>
                     <attribute name="port"><data type="integer"/></attribute>
                     <optional>
                       <attribute name="internal-port"><data type="integer"/></attribute>
                     </optional>
                   </group>
                   <attribute name="range">
                     <data type="string">
                       <param name="pattern">([0-9\-]+)</param>
                     </data>
                   </attribute>
                 </choice>
               </element>
             </zeroOrMore>
           </element>
         </optional>
         <optional>
           <element name="storage">
             <zeroOrMore>
               <element name="storage-mapping">
                 <attribute name="id"><data type="ID"/></attribute>
                 <choice>
                   <attribute name="source-dir"><text/></attribute>
                   <attribute name="source-dir-root"><text/></attribute>
                 </choice>
                 <attribute name="target-dir"><text/></attribute>
                 <optional>
                   <attribute name="options"><text/></attribute>
                 </optional>
               </element>
             </zeroOrMore>
           </element>
         </optional>
         <optional>
           <ref name="element-primitive"/>
         </optional>
       </interleave>
     </element>
   </define>
 
   <define name="element-group">
     <element name="group">
       <attribute name="id"><data type="ID"/></attribute>
       <optional>
         <attribute name="description"><text/></attribute>
       </optional>
       <interleave>
         <ref name="element-resource-extra"/>
         <oneOrMore>
           <ref name="element-primitive"/>
         </oneOrMore>
       </interleave>
     </element>
   </define>
 
   <define name="element-clone">
     <element name="clone">
       <attribute name="id"><data type="ID"/></attribute>
       <optional>
         <attribute name="description"><text/></attribute>
       </optional>
       <interleave>
         <ref name="element-resource-extra"/>
         <choice>
           <ref name="element-primitive"/>
           <ref name="element-group"/>
         </choice>
       </interleave>
     </element>
   </define>
 
   <define name="element-resource-extra">
     <zeroOrMore>
       <choice>
         <ref name="element-instance_attributes"/>
         <element name="meta_attributes">
           <externalRef href="nvset-4.0.rng"/>
         </element>
       </choice>
     </zeroOrMore>
   </define>
 
   <define name="element-resource-extra.primitive-template">
     <zeroOrMore>
       <choice>
         <ref name="element-instance_attributes"/>
         <element name="meta_attributes">
           <externalRef href="nvset-4.0.rng"/>
         </element>
         <element name="utilization">
           <externalRef href="nvset-4.0.rng"/>
         </element>
       </choice>
     </zeroOrMore>
   </define>
 
   <define name="element-resource-extra.op">
     <zeroOrMore>
       <choice>
         <ref name="element-instance_attributes"/>
         <element name="meta_attributes">
           <grammar>
             <include href="nvset-4.0.rng">
               <!--
                @COMPAT: Support for node attribute expressions is deprecated
                here. We can just delete this define when we drop support.
               -->
               <define name="element-nvset.rule">
                 <parentRef name="element-rule-node-allowed"/>
               </define>
             </include>
           </grammar>
         </element>
       </choice>
     </zeroOrMore>
   </define>
 
   <define name="element-operations">
     <optional>
       <element name="operations">
         <optional>
           <attribute name="id"><data type="ID"/></attribute>
         </optional>
         <optional>
           <attribute name="id-ref"><data type="IDREF"/></attribute>
         </optional>
         <zeroOrMore>
           <element name="op">
             <attribute name="id"><data type="ID"/></attribute>
             <attribute name="name"><text/></attribute>
             <attribute name="interval"><text/></attribute>
             <optional>
               <attribute name="description"><text/></attribute>
             </optional>
             <optional>
               <choice>
                 <attribute name="start-delay"><text/></attribute>
                 <attribute name="interval-origin"><text/></attribute>
               </choice>
             </optional>
             <optional>
               <attribute name="timeout"><text/></attribute>
             </optional>
             <optional>
               <attribute name="enabled"><data type="boolean"/></attribute>
             </optional>
             <optional>
               <attribute name="record-pending"><data type="boolean"/></attribute>
             </optional>
             <optional>
               <attribute name="role">
                 <choice>
                   <value>Stopped</value>
                   <value>Started</value>
                   <value>Promoted</value>
                   <value>Unpromoted</value>
                   <value>Slave</value>
                   <value>Master</value>
                 </choice>
               </attribute>
             </optional>
             <optional>
               <attribute name="on-fail">
                 <choice>
                   <value>ignore</value>
                   <value>block</value>
                   <value>demote</value>
                   <value>stop</value>
                   <value>restart</value>
                   <value>standby</value>
                   <value>fence</value>
                   <value>restart-container</value>
                 </choice>
               </attribute>
             </optional>
             <ref name="element-resource-extra.op"/>
           </element>
         </zeroOrMore>
       </element>
     </optional>
   </define>
 
   <define name="element-resource-class">
     <choice>
       <group>
         <attribute name="class"><value>ocf</value></attribute>
         <attribute name="provider"><text/></attribute>
       </group>
       <attribute name="class">
         <choice>
           <value>lsb</value>
           <value>heartbeat</value>
           <value>stonith</value>
           <value>service</value>
           <value>systemd</value>
 
           <!-- @COMPAT upstart resources are deprecated since 2.1.0 -->
           <value>upstart</value>
 
           <!-- @COMPAT nagios resources are deprecated since 2.1.6 -->
           <value>nagios</value>
         </choice>
       </attribute>
     </choice>
   </define>
 
   <define name="element-instance_attributes">
      <element name="instance_attributes">
        <grammar>
          <include href="nvset-4.0.rng">
            <define name="element-nvset.rule">
              <parentRef name="element-rule-node-allowed"/>
            </define>
          </include>
        </grammar>
      </element>
   </define>
 </grammar>
diff --git a/xml/upgrade-3.10-2.xsl b/xml/upgrade-3.10-2.xsl
index 1659110c01..4bb7ee3572 100644
--- a/xml/upgrade-3.10-2.xsl
+++ b/xml/upgrade-3.10-2.xsl
@@ -1,216 +1,226 @@
 <?xml version="1.0" encoding="UTF-8"?>
 
 <!--
  Use comments liberally as future maintainers may be unfamiliar with XSLT.
  -->
 
 <!--
  upgrade-3.10-2.xsl
 
  Guarantees after this transformation:
  * Within a given nvset, there is at most one nvpair with a given name. If there
    were duplicates prior to this transformation, only the first one is kept.
  * There are no legacy promotable clone resources. If a resource was a legacy
    promotable clone prior to this transformation, it is now a standard
    promotable clone (that is, a clone with the meta-attribute "promotable" set
    to "true").
  * There is at most one top-level rule within a location constraint. If a
    location constraint had N top-level rules (N > 1) prior to this
    transformation, it is now converted to N location constraints, each with a
    single top-level rule.
 
  Anything that matches all resource types should be placed in a later
  transformation, so that it can ignore the possibility of legacy promotable
  clone resources.
  -->
 
 <xsl:stylesheet version="1.0"
                 xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
 
 <xsl:import href="upgrade-3.10-common.xsl"/>
 
 <!--
  Copy everything unaltered by default, except optionally set "original"
 
  Params:
  * original: See identity template
  -->
 <xsl:template match="/|@*|node()">
     <xsl:param name="original"/>
 
     <xsl:call-template name="identity">
         <xsl:with-param name="original" select="$original"/>
     </xsl:call-template>
 </xsl:template>
 
 
 <!-- Name/value pairs -->
 
 <!--
  Ensure there is at most one nvpair with a given name in a given nvset.
 
  By dropping the ignored duplicates now, we facilitate later transformations in
  which we drop nvpairs with certain values. The later steps will involve
  comparisons among multiple nvsets. These are easier to reason about and to
  regression-test if, prior to that, we drop all but one nvpair with a given name
  in a given nvset.
  -->
 
 <!--
  Drop nvpairs with value="#default" if there is a later nvpair with the same
  name. Value "#default" unsets the option, so any later nvpair takes precedence.
 -->
 <xsl:template match="nvpair[(@value = '#default')
                             and (@name = following-sibling::*/@name)]"/>
 
 <!--
  Drop nvpairs with a value other than "#default" if certain conditions (detailed
  below) are satisfied.
  -->
 <xsl:template match="nvpair[@value != '#default']">
     <!-- All preceding sibling nvpairs with the same name -->
     <xsl:variable name="before"
                   select="preceding-sibling::nvpair[@name = current()/@name]"/>
 
     <!-- All following sibling nvpairs with the same name -->
     <xsl:variable name="after"
                   select="following-sibling::nvpair[@name = current()/@name]"/>
 
     <!--
      Last preceding sibling nvpair with the same name and value "#default"
      -->
     <xsl:variable name="last_default_before"
                   select="$before[@value = '#default'][last()]"/>
 
     <xsl:choose>
         <!--
          Drop if there's a following sibling with the same name and value
          "#default". The later "#default" value would unset the current nvpair's
          value.
          -->
         <xsl:when test="$after[@value = '#default']"/>
 
         <!--
          Drop if both:
          * There's a preceding sibling nvpair with the same name
          * Either of the following:
            * There's no preceding sibling nvpair with the same name and value
              "#default"
            * There's a preceding sibling nvpair with the same name between the
              most recent "#default" and the current node.
 
          The preceding sibling nvpair would take effect, and there is no
          "#default" value to unset it before we reach the current nvpair.
 
          This uses an XPath 1.0 set intersection idiom.
          -->
         <xsl:when test="$before
                         and (not($last_default_before)
                              or $last_default_before/following-sibling::nvpair
                                 [count(.|$before) = count($before)])"/>
 
         <!-- Otherwise, keep the nvpair -->
         <xsl:otherwise>
             <xsl:call-template name="identity"/>
         </xsl:otherwise>
     </xsl:choose>
 </xsl:template>
 
 
 <!-- Resources -->
 
 <!--
  Convert master resources to clones with promotable meta-attribute set to "true"
  -->
 <xsl:template match="master">
     <xsl:element name="clone">
         <xsl:apply-templates select="@*"/>
 
         <!--
          Prepend new meta_attributes element that takes precedence over all
          others, with promotable="true"
         -->
         <xsl:element name="meta_attributes">
             <xsl:variable name="meta_id"
                           select="concat($upgrade_prefix, 'promotable-legacy-',
                                          @id, '-meta_attributes')"/>
 
             <xsl:attribute name="id">
                 <xsl:value-of select="$meta_id"/>
             </xsl:attribute>
 
             <!-- Override any manually configured meta-attributes -->
             <xsl:attribute name="score">INFINITY</xsl:attribute>
 
             <xsl:element name="nvpair">
                 <xsl:attribute name="id">
                     <xsl:value-of select="concat($meta_id, '-promotable')"/>
                 </xsl:attribute>
                 <xsl:attribute name="name">promotable</xsl:attribute>
                 <xsl:attribute name="value">true</xsl:attribute>
             </xsl:element>
         </xsl:element>
 
         <!-- Keep all existing children -->
         <xsl:apply-templates select="node()"/>
     </xsl:element>
 </xsl:template>
 
+<!--
+ Rename a bundle container's masters attribute to promoted-max. (This is the
+ only place the schema allows a masters attribute.)
+ -->
+<xsl:template match="@masters">
+    <xsl:attribute name="promoted-max">
+        <xsl:value-of select="."/>
+    </xsl:attribute>
+</xsl:template>
+
 
 <!-- Constraints -->
 
 <!--
  If a location constraint contains multiple top-level rules, replace it with
  a set of new location constraints, one for each top-level rule.
  -->
 <xsl:template match="rsc_location[count(rule) > 1]">
     <xsl:for-each select="rule">
         <xsl:element name="rsc_location">
             <!-- Copy attributes from the original rsc_location -->
             <xsl:apply-templates select="../@*"/>
             <xsl:attribute name="original">0</xsl:attribute>
 
             <!--
              Set a probably-unique ID for the new rsc_location, based on the
              existing rsc_location's ID and the rule's position
              -->
             <xsl:attribute name="id">
                 <xsl:value-of select="concat($upgrade_prefix, ../@id, '-',
                                              position())"/>
             </xsl:attribute>
 
             <!-- Add resource sets, rule, and lifetime (in order) -->
             <xsl:choose>
                 <!--
                  The descendants of the first rsc_location created should keep
                  their "original" values from the old rsc_location, if any
                  -->
                 <xsl:when test="position() = 1">
                     <xsl:apply-templates select="../resource_set"/>
                     <xsl:apply-templates select="."/>
                     <xsl:apply-templates select="../lifetime"/>
                 </xsl:when>
 
                 <!--
                  The descendants of later rsc_location elements should all have
                  original="0" for resource_set and lifetime elements. The rule
                  element should keep its existing "original" value, since it
                  will occur in exactly one of the newly created constraints.
                  -->
                 <xsl:otherwise>
                     <xsl:apply-templates select="../resource_set">
                         <xsl:with-param name="original" select="'0'"/>
                     </xsl:apply-templates>
                     <xsl:apply-templates select=".">
                         <xsl:with-param name="original"/>
                     </xsl:apply-templates>
                     <xsl:apply-templates select="../lifetime">
                         <xsl:with-param name="original" select="'0'"/>
                     </xsl:apply-templates>
                 </xsl:otherwise>
             </xsl:choose>
         </xsl:element>
     </xsl:for-each>
 </xsl:template>
 
 </xsl:stylesheet>