$nftables_rules = lookup('sunet::nftables::allow::rules', Hash, 'deep', {}) # Create resources for each rule $nftables_rules.each |$name, $params| { sunet::nftables::allow { $name: * => $params, } }