base:
    '*':
#       - core.utils
#       - core.monitoring
#       - core.security
#        - webserver

{% set self = grains['roles'] %}
      "roles:{{ self }}":
         - match: grain
         - {{ self }}
#    'roles:webserver':
#        - match: grain
#        - webserver