Blog · topic
Inventories, playbooks, handlers and vaulted secrets: configuration management that changes only what it must.
3 postsRSS feed
A playbook that changes nothing says changed=3 and restarts nginx every run. Why command and shell always report changed, how handlers fire, and the fix.
ansible-vault encrypts the file, not the output. How debug, verbose results and diffs leak a secret into CI logs, what no_log hides, and the cleanup order.
UNREACHABLE means Ansible never got an SSH session; Missing sudo password means it got in and become failed. Six real causes, their exact errors and fixes.