Pyinfra is what ansible should have been. It's straight python rather than a janky mix of yaml, templates, and bolted-on control flow primitives.

There is this: https://github.com/seantis/suitable

But the main guy who developed it at that company left, so no idea on its longevity.