Provisioning

What it does: applies the same change — a set of commands, or a password rotation — across MANY devices at once over SSH, instead of logging into each by hand.

What you need: the list of target devices and working SSH credentials for them (pull keys/passwords from the Vault). Start with Dry-run ON so it shows what WOULD happen without sending anything.

Safe to run: this is the one tool here that CHANGES devices — treat it with care. Always dry-run first, apply to one device before the whole fleet, and know how to roll back. Every action is logged with credentials masked.

Reading results: each device gets its own transcript (what was sent, what it replied). Green/OK means the change landed; a failure on one device doesn't stop the others, so scan for the red rows and re-run just those. A device that times out was probably unreachable or had wrong credentials — fix that before assuming the command was bad.