CFEngine

What do you like best?

It creates a self-healing infrastructure that can manage everything.

What do you dislike?

Unable to set SELinux labels in files promises. No built-in Posix groups management (yet).

Recommendations to others considering the product:

Give it a shot in a limited capacity. Don't try to convert your entire infrastructure to use it for everything in one shot. Take one or two machines and implement one thing with it. Slowly build a catalog of promises until you get more familiar with it.

What problems are you solving with the product? What benefits have you realized?

Install dozens of software services and configure them. Manage users and passwords. Configure sudo.

I can go from zero to production ready in about five minutes for many services.