Ansible is pretty good at this. A huge library of Python-fu that takes declarative statements on how things should be

Doing some things idempotently can be an interesting challenge