I haven't used either (yet) but Dhall or Cue lang should be on your list of candidates IMO.

https://cuelang.org/

(To me things like puppet or ansible seem like thin layers over shell and ssh, whereas both Dhall and Cue seem to innovate in ways that are more, uh, je ne sais quoi ;-) YMMV)