Ansible

Playbooks describe the desired state of a machine, and Ansible connects over SSH to apply it. It needs no agent on targets. Roles and a large collection of modules cover most common tasks.

The core is free, and Red Hat sells a platform with a controller and support.

Puppet, Chef, and Terraform serve other needs. Ansible suits sysadmins who manage fleets of servers.