base:
    '*':
#       - core.utils
#       - core.monitoring
#       - core.security
#        - webserver
{% if grains['roles'] is defined %}
 {% for role in grains['roles'] %}
    'roles:{{ role }}':
        - match: grain
        - {{ role }}
 {% endfor %}
{% endif %}


#{% set self = grains['roles'] %}
#      "roles:{{ self }}":
#         - match: grain
#         - {{ self }}
#    'roles:webserver':
#        - match: grain
#        - webserver