site.pp

# Until further upgrades V3 pearson will not use host name classification and instead will apply common modules and stringently implement passed roles.

node default {
    # apply our pmc_common module
    class{'profile::common': }

    # switch on $::pmc_role custom FACT
    # do not fail if no role is specifically applied.
    # given that we have only a few roles, a declarative switch statement like this is preferred.
    case $::pmc_role {
        'bastion': {
            class{ 'role::bastion': }
            class{ 'profile::persistent_ebs': }
        }
        default: {
            notice("no role module found.")
        }
    }

    # apply pmc_security module
    class{'profile::security': }
}