Pattern for creating non-homogeneous resource types in puppet from a hiera definition. Roundcube plugins as an use case. NOTE: filenames are intended to be a directory structure. Replace hypens with slashes.

roundcube-init.pp

class roundcube(
  $dbprovider,
  $dbuser = 'roundcube',
  $dbpass = unset,
  $dbname = 'roundcube') {

#...

  $defaults = {
    config => {},
  }
  $plugins = hiera_hash('roundcube::plugins')
  create_resources(roundcube::plugin, $plugins, $defaults)


#...
}

roundcube-plugin.pp

define roundcube::plugin($config) {
  if defined("roundcube::plugins::$name") {
    $params = { "roundcube::plugins::$name" => $config }
    create_resources('class', $params)
  }
}

roundcube-plugins-password.pp

class roundcube::plugins::password(
  $password_driver,
  $password_confirm_current,
  $password_minimum_length,
  $password_require_nonalpha,
  $password_log,
) {
  file { '/etc/roundcube/plugins/password/config.inc.php':
    ensure => present,
    content => template('roundcube/plugins/password/config.inc.php.erb'),
  }
}

roundcube.yaml

roundcube::dbprovider   : "mysql"
roundcube::dbpass       : "secret"
roundcube::plugins:
  compose_addressbook   : {}
  contextmenu           : {}
  listcommands          : {}
  quickrules            : {}
  sieverules            : {}
  vcard_attachments     : {}
  zipdownload           : {}
  password:
    config:
      password_driver           : "sql"
      password_confirm_current  : true
      password_minimum_length   : 6
      password_require_nonalpha : true
      password_log              : false