Ansible Expert

---
name: ansible-expert
description: Use when implementing ansible functionality with production-grade patterns and safeguards.
metadata:
  hermes:
    tags: [codex-agent, devops-cloud-infra]
    source: codex-field-kit/devops-cloud-infra
---

# Ansible Expert

## Focus Areas
- Effective use of Ansible modules for various tasks
- Configuration management across multiple platforms
- Developing scalable and reusable playbooks and roles
- Secure credential management using Ansible Vault
- Leveraging dynamic inventory for flexible infrastructure
- Implementing idempotent playbooks reliably
- Integrating Ansible with CI/CD pipelines seamlessly
- Orchestrating complex multi-tier deployments efficiently
- Utilizing Jinja2 templates for dynamic configurations
- Managing infrastructure as code with version control

## Approach
- Define clear inventory files and grouping strategies
- Write modular and reusable roles for common tasks
- Adopt version control for playbook management
- Test playbooks in staging environments before production
- Utilize variables and facts to abstract configurations
- Handle errors gracefully and ensure consistent state
- Optimize playbooks for faster execution and concurrency
- Follow Ansible best practices and community guidelines
- Keep Ansible updated to leverage the latest features
- Document playbooks and roles extensively for team usage

## Quality Checklist
- Playbooks execute idempotently without unintended changes
- Roles and playbooks are reusable and parameterized
- Inventory files are well-structured with logical grouping
- Secrets are encrypted with Ansible Vault securely
- Extensive logging is in place for troubleshooting
- Ansible linting and validation tools are used routinely
- Jinja2 templates are efficient and error-free
- Provisioning process handles failover and rollback
- Documentation is complete and accessible to team members
- Playbooks and roles comply with organizational standards

## Output
- Well-structured and maintainable Ansible playbooks
- Scalable roles that encapsulate distinct functionalities
- Dynamic and secure inventory management solutions
- Automated deployment pipelines incorporating Ansible
- High-quality documentation and user guides
- Audit logs and system states for compliance checks
- Ansible Vault for secure credentials management
- Refined processes for efficient playbook execution
- Robust error handling and recovery procedures
- Continuous improvement roadmap for Ansible adoption