Ansible AI-Native Software Development Infrastructure Automation

┌─────────────────────────────────────────────┐
│           AI-Native Development Platform      │
│                                               │
│  ┌──────────┐  ┌──────────┐  ┌───────────┐  │
│  │ AI Code  │  │ AI Test  │  │ AI Review │  │
│  │ Assistant│  │Generator │  │  & Audit  │  │
│  └──────────┘  └──────────┘  └───────────┘  │
│                                               │
│  ┌──────────┐  ┌──────────┐  ┌───────────┐  │
│  │ GPU Dev  │  │ Model    │  │ AI-CI/CD  │  │
│  │ Envs     │  │ Registry │  │ Pipeline  │  │
│  └──────────┘  └──────────┘  └───────────┘  │
│                                               │
│  ┌──────────────────────────────────────┐    │
│  │    Infrastructure (Ansible Managed)   │    │
│  └──────────────────────────────────────┘    │
└─────────────────────────────────────────────┘

# roles/ai-code-assistant/tasks/main.yml
---
- name: Deploy self-hosted coding assistant (Continue.dev + Ollama)
  block:
    - name: Install Ollama for local model serving
      ansible.builtin.shell: curl -fsSL https://ollama.com/install.sh | sh
      args:
        creates: /usr/local/bin/ollama

    - name: Pull coding model
      ansible.builtin.command: "ollama pull {{ item }}"
      loop:
        - codellama:34b
        - deepseek-coder-v2:latest
        - qwen2.5-coder:32b
      register: pull_result
      changed_when: "'pulling' in pull_result.stdout"

    - name: Configure Ollama service
      ansible.builtin.template:
        src: ollama.service.j2
        dest: /etc/systemd/system/ollama.service
      notify: Restart Ollama

    - name: Deploy Continue.dev server config
      ansible.builtin.template:
        src: continue-config.json.j2
        dest: /opt/continue-server/config.json
      vars:
        model_endpoint: "http://localhost:11434"
        default_model: "{{ ai_coding_model | default('qwen2.5-coder:32b') }}"
        context_window: 32768
        max_tokens: 4096

  handlers:
    - name: Restart Ollama
      ansible.builtin.systemd:
        name: ollama
        state: restarted
        daemon_reload: true

# gpu-dev-environment.yml
---
- name: Provision GPU development environments
  hosts: gpu_devboxes
  become: true

  vars:
    cuda_version: "12.6"
    python_version: "3.12"
    gpu_memory_fraction: 0.8

  tasks:
    - name: Install NVIDIA drivers and CUDA toolkit
      ansible.builtin.apt:
        name:
          - "nvidia-driver-560"
          - "nvidia-cuda-toolkit"
          - "nvidia-container-toolkit"
        state: present
        update_cache: true

    - name: Configure NVIDIA Container Runtime
      ansible.builtin.template:
        src: nvidia-container-runtime.toml.j2
        dest: /etc/nvidia-container-runtime/config.toml
      notify: Restart Docker

    - name: Deploy per-developer GPU workspace
      ansible.builtin.include_tasks: create-dev-workspace.yml
      loop: "{{ developers }}"
      loop_control:
        loop_var: developer

    - name: Set GPU memory limits per developer
      ansible.builtin.template:
        src: gpu-quota.yaml.j2
        dest: "/etc/gpu-quotas/{{ developer.username }}.yaml"
      loop: "{{ developers }}"
      loop_control:
        loop_var: developer
      vars:
        gpu_memory_limit: "{{ developer.gpu_memory | default('16Gi') }}"
        gpu_count: "{{ developer.gpu_count | default(1) }}"

    - name: Deploy Jupyter with GPU support
      community.docker.docker_container:
        name: "jupyter-{{ developer.username }}"
        image: "quay.io/jupyter/pytorch-notebook:cuda12-python3"
        state: started
        restart_policy: unless-stopped
        ports:
          - "{{ 8888 + idx }}:8888"
        env:
          JUPYTER_TOKEN: "{{ developer.jupyter_token }}"
          NVIDIA_VISIBLE_DEVICES: "{{ developer.gpu_ids | default('all') }}"
        device_requests:
          - driver: nvidia
            count: "{{ developer.gpu_count | default(1) }}"
            capabilities: [["gpu"]]
        volumes:
          - "/home/{{ developer.username }}/workspace:/home/jovyan/work"
      loop: "{{ developers }}"
      loop_control:
        loop_var: developer
        index_var: idx

# ai-cicd-pipeline.yml
---
- name: Configure AI-enhanced CI/CD
  hosts: ci_servers
  become: true

  tasks:
    - name: Deploy AI code review bot
      ansible.builtin.template:
        src: ai-review-config.yml.j2
        dest: /opt/ai-cicd/review-config.yml
      vars:
        review_settings:
          model: "{{ ai_review_model }}"
          checks:
            - security_vulnerabilities
            - performance_antipatterns
            - style_consistency
            - test_coverage_suggestions
          auto_approve_threshold: 0.95
          block_on_critical: true

    - name: Deploy AI test generator
      ansible.builtin.template:
        src: ai-test-gen.yml.j2
        dest: /opt/ai-cicd/test-generator.yml
      vars:
        test_config:
          model: "{{ ai_test_model }}"
          coverage_target: 80
          mutation_testing: true
          generate_edge_cases: true
          frameworks:
            python: pytest
            javascript: jest
            go: testing

    - name: Configure AI-powered deployment decisions
      ansible.builtin.template:
        src: deploy-gate.yml.j2
        dest: /opt/ai-cicd/deploy-gate.yml
      vars:
        gate_config:
          model: "{{ ai_gate_model }}"
          checks:
            - predicted_error_rate
            - resource_impact_estimate
            - rollback_risk_score
          auto_deploy_threshold: 0.90
          require_human_above_risk: 0.3

# model-registry.yml
---
- name: Deploy internal model registry
  hosts: model_registry
  become: true

  tasks:
    - name: Deploy MLflow for model versioning
      community.docker.docker_compose_v2:
        project_src: /opt/mlflow
        state: present
      vars:
        mlflow_config:
          backend_store: "postgresql://{{ db_user }}:{{ db_pass }}@{{ db_host }}/mlflow"
          artifact_root: "s3://{{ model_bucket }}/artifacts"
          workers: 4

    - name: Configure model promotion pipeline
      ansible.builtin.template:
        src: model-promotion.yml.j2
        dest: /opt/mlflow/promotion-rules.yml
      vars:
        promotion_rules:
          staging_to_production:
            min_accuracy: 0.95
            max_latency_p99_ms: 100
            min_test_coverage: 0.80
            required_approvers: 2
          canary_percentage: 5
          rollback_on_error_rate: 0.01

    - name: Deploy model serving (vLLM)
      ansible.builtin.include_role:
        name: vllm_server
      vars:
        vllm_model: "{{ production_model }}"
        vllm_gpu_count: "{{ serving_gpus }}"
        vllm_max_model_len: 32768
        vllm_port: 8000

# dev-workstation.yml
---
- name: Configure AI-native developer workstation
  hosts: dev_workstations

  tasks:
    - name: Install AI development tools
      ansible.builtin.package:
        name: "{{ item }}"
        state: present
      loop:
        - python3.12
        - nodejs
        - docker-ce
        - git

    - name: Install Python AI/ML packages
      ansible.builtin.pip:
        name:
          - torch
          - transformers
          - langchain
          - ollama
          - vllm
          - pytest-ai
        virtualenv: "/home/{{ dev_user }}/.venvs/ai-dev"
        virtualenv_python: python3.12

    - name: Configure VS Code AI extensions
      ansible.builtin.template:
        src: vscode-settings.json.j2
        dest: "/home/{{ dev_user }}/.config/Code/User/settings.json"
      vars:
        ai_settings:
          continue_server: "http://{{ ai_server }}:8080"
          copilot_enabled: true
          ai_test_generation: true
          inline_chat_model: "{{ inline_model }}"

    - name: Deploy local development model
      ansible.builtin.command: >
        ollama pull {{ dev_model | default('qwen2.5-coder:7b') }}
      register: pull
      changed_when: "'pulling' in pull.stdout"

- name: AI development security controls
  block:
    - name: Configure code scanning for AI-generated code
      ansible.builtin.template:
        src: ai-code-scan.yml.j2
        dest: /opt/security/ai-code-scan.yml
      vars:
        scan_config:
          scan_ai_generated: true
          check_license_compliance: true
          check_training_data_leakage: true
          block_known_vulnerable_patterns: true
          sast_tools: [semgrep, bandit, codeql]

    - name: Enforce AI model usage policies
      ansible.builtin.template:
        src: model-policy.yml.j2
        dest: /etc/ai-policy/allowed-models.yml
      vars:
        policy:
          allowed_models:
            - "qwen2.5-coder:*"
            - "deepseek-coder-v2:*"
            - "codellama:*"
          blocked_models:
            - "*:untrusted*"
          data_residency: "{{ data_region }}"
          no_external_api: "{{ air_gapped | default(false) }}"