infra-ansible-automation

What problem does it solve?

Provide a repeatable, safe way to author, validate, and apply Ansible automation so teams avoid fragile, non-idempotent playbooks, accidental production changes, and leaked secrets while maintaining clear inventory and role boundaries.

Core Features & Use Cases

• Inventory & Grouping: Best-practice inventory organization by environment and function with guidance for group_vars and host_vars.
• Role & Collection Design: Templates for scalable role structure, separation of concerns, and documentation of role inputs.
• Validation & Safety: Syntax checks, ansible-lint guidance, narrow-target dry runs, and handler patterns to reduce runtime surprises.
• Secrets & Execution Guards: Vault integration practices, secret rotation guidance, and escalation rules for production credentials.
• Dynamic & Cloud Inventory: Guidance for cloud inventory plugins, caching strategies, and safe refresh practices.
• Use Case Example: Create an nginx role, attach to the web group, validate with lint and --check against dev, then run a controlled rollout to staging.

Quick Start

Run the infra-ansible-automation skill to create or review an idempotent role and playbook for nginx, validate with syntax checks and ansible-lint, and produce a documented execution plan for a narrow-target dry run.