- Implement 4-role architecture (base_provision, patching, hardening, decommission)
- Extract hardcoded values to role defaults and group_vars
- Add Ansible Vault integration for secrets management
- Implement proper handlers for service restarts instead of direct tasks
- Add Molecule testing framework with Docker driver
- Configure ansible-lint with production profile settings
Fix all 125+ ansible-lint violations:
- Add FQCN (Fully Qualified Collection Names) to all modules
- Replace yes/no with true/false for boolean values
- Add explicit mode parameters to file/template operations
- Remove duplicate post_tasks blocks from playbooks
- Add newlines at end of all YAML files
- Fix key ordering in tasks (name, when, block)
- Convert service restarts to handlers with notify
- Remove ignore_errors in favor of failed_when/changed_when
- Fix line length violations and empty lines
- Add noqa comments for unavoidable risky-file-permissions
Update documentation:
- Add REFACTORING.md with implementation details
- Add VAULT_GUIDE.md for secrets management
- Add per-role README.md files
- Update existing documentation
All playbooks now pass ansible-lint production profile with 0 violations.
- Add enterprise-infra-simulator: Ansible-based container infrastructure with provisioning, patching, hardening, and decommissioning playbooks
- Add migration-validation-framework: Python CLI tool for system migration validation with collectors, comparators, and HTML reporting
- Add observability-stack: Complete ELK + Grafana monitoring platform with alerting rules and incident simulation
- Add comprehensive documentation: architecture overview, operational runbooks, and CI/CD pipeline
- Add CHANGELOG.md and AI_CONTEXT.md for project tracking and future development
- Fix Ansible syntax: Update boolean values from 'yes/no' to 'true/false' for modern Ansible compatibility
Demonstrates enterprise Linux infrastructure engineering skills across infrastructure automation, application development, and monitoring.
Mateusz Suski