gistfile1.txt

define cronallow($members) {
  file { $name: content => template("..."), ensure => present, ... }
}

class base {
  cronallow { "/etc/cron.allow": members => root }
}

class sub inherits base {
  Cronallow["/etc/cron.allow"] { members +> [postgres, whatever] }
}