Historically there were 4 main configuration management tools: puppet/chef/ansible/salt.
The first two faded away. They're unarguably not the most usable and require to program in ruby. The next generation ansible/salt came out and arguably did better on every aspect.
I think it's fair to say that ansible is the safe standard (redhat acquired it few years ago, they maintained and extended it pretty well). Ansible is very easy to use and to integrate in anything as long as you have SSH access.
The only downside of ansible is that it can get slow with thousands of hosts to manage (gotta establish SSH connections). Salt can do better with large amount of hosts.