[aequitas]

You could give Puppet Bolt a try, which is like a blend of an Ansible agentless method with declarative Puppet manifests.