base:
  '*':
    - gnuviechadmin
{% for role in ('database', 'queues', 'webinterface', 'gvaldap', 'gvafile', 'gvamysql', 'gvapgsql', 'gvaweb') %}
  'roles:gnuviechadmin.{{ role }}':
    - match: grain
    - gnuviechadmin.{{ role }}
{% endfor %}