Do you need the capacity of one controller or two? If you only need an n+1, you should make it a master/backup master redundancy:
You point the APs at a single VRRP instance between the controllers.
Only a single controller will work at a time.
Configurations will be synchronized.
If you need the capacity of two controllers, you need a master/local configuration where both controllers can actively terminate access points at the same time.