Host inventories modelled with ansible. For user X to gain access to ansible host group Y, you just need to make a merge request with your key and host group. C

Host inventories modelled with ansible. For user X to gain access to ansible host group Y, you just need to make a merge request with your key and host group. CI syncs ansible configs with the hosts. There is also a cron that checks authorized_users vs git and sends email when something is out of sync.