iterating lists in puppet

test.erb

<%-
@allow_parameters = {
  'ALLOWDEVFILE'    => '/dev/.udev/rules.d/root.rules',
  'ALLOWIPCPROC'    => '/usr/sbin/zabbix_agentd',
  'ALLOWHIDDENFILE' => ['/dev/.initramfs', '/dev/.blkid.tab', '/dev/.blkid.tab.old']
}
-%>
<%- @allow_parameters.each_pair do |key, value| -%>
  <%- if value.kind_of?(String) -%>
<%= key %>=<%= value %>
  <%- elsif value.kind_of?(Array) -%>
    <%- value.each do |v| -%>
<%= key %>=<%= v %>
    <%- end -%>
  <%- end -%>
<%- end -%>
################## output ################
erb  -T '-' test.erb
ALLOWDEVFILE=/dev/.udev/rules.d/root.rules
ALLOWIPCPROC=/usr/sbin/zabbix_agentd
ALLOWHIDDENFILE=/dev/.initramfs
ALLOWHIDDENFILE=/dev/.blkid.tab
ALLOWHIDDENFILE=/dev/.blkid.tab.old

test.pp

$allow_parameters = {
  'ALLOWDEVFILE'    => '/dev/.udev/rules.d/root.rules',
  'ALLOWIPCPROC'    => '/usr/sbin/zabbix_agentd',
  'ALLOWHIDDENFILE' => ['/dev/.initramfs', '/dev/.blkid.tab', '/dev/.blkid.tab.old'],
}
$allow_parameters.each |$key, $value| {
  if $value =~ String {
    notify {"${key}=${value}": }
  } elsif $value =~ Array {
    $value.each |$v| {
      notify {"${key}=${v}": }
    }
  }
}
################## output ################
puppet apply test.pp                                                          
Notice: Compiled catalog for work-laptop.home.arpa in environment production in 0.06 seconds
Notice: ALLOWDEVFILE=/dev/.udev/rules.d/root.rules
Notice: /Stage[main]/Main/Notify[ALLOWDEVFILE=/dev/.udev/rules.d/root.rules]/message: defined 'message' as 'ALLOWDEVFILE=/dev/.udev/rules.d/root.rules'
Notice: ALLOWIPCPROC=/usr/sbin/zabbix_agentd
Notice: /Stage[main]/Main/Notify[ALLOWIPCPROC=/usr/sbin/zabbix_agentd]/message: defined 'message' as 'ALLOWIPCPROC=/usr/sbin/zabbix_agentd'
Notice: ALLOWHIDDENFILE=/dev/.initramfs
Notice: /Stage[main]/Main/Notify[ALLOWHIDDENFILE=/dev/.initramfs]/message: defined 'message' as 'ALLOWHIDDENFILE=/dev/.initramfs'
Notice: ALLOWHIDDENFILE=/dev/.blkid.tab
Notice: /Stage[main]/Main/Notify[ALLOWHIDDENFILE=/dev/.blkid.tab]/message: defined 'message' as 'ALLOWHIDDENFILE=/dev/.blkid.tab'
Notice: ALLOWHIDDENFILE=/dev/.blkid.tab.old
Notice: /Stage[main]/Main/Notify[ALLOWHIDDENFILE=/dev/.blkid.tab.old]/message: defined 'message' as 'ALLOWHIDDENFILE=/dev/.blkid.tab.old'
Notice: Applied catalog in 0.02 seconds

test.rb

@allow_parameters = {
  'ALLOWDEVFILE'    => '/dev/.udev/rules.d/root.rules',
  'ALLOWIPCPROC'    => '/usr/sbin/zabbix_agentd',
  'ALLOWHIDDENFILE' => ['/dev/.initramfs', '/dev/.blkid.tab', '/dev/.blkid.tab.old'],
}
@allow_parameters.each_pair do |key, value|
  if value.kind_of?(String) 
    puts("#{key}=#{value}")
  elsif value.kind_of?(Array)
    value.each do |v|
      puts("#{key}=#{v}")
    end
  end
end
################## output ################
ruby test.rb
ALLOWDEVFILE=/dev/.udev/rules.d/root.rules
ALLOWIPCPROC=/usr/sbin/zabbix_agentd
ALLOWHIDDENFILE=/dev/.initramfs
ALLOWHIDDENFILE=/dev/.blkid.tab
ALLOWHIDDENFILE=/dev/.blkid.tab.old