How do you update basic settings on a large number of servers (more than 500) using Ansible?

Question

Ansible

How do you update basic settings on a large number of servers (more than 500) using Ansible?
Do you start updating the basic settings on all servers at once (adding admins, installing security updates, etc.)?
How do you build this process?
Perhaps someone starts ansible-playbook and waits for it to bypass all the servers.
But maybe someone uses a different approach?
Does anyone have any ideas for running ansible-playbook on specific servers only and importing another playbook?
For example, there is an ansible-playbook that installs software (for example, installs only ELK), can you add another plabybook to this playbook (for example, which stores general settings)?

Answer 1

Let there be two types of tasks.
1. Non-critical updates - creating a user, installing manual software (mc, htop, etc)
2. Critical - updating the system core or application for which this server is spinning
. Even if there is an error, it is corrected as quickly as it appeared. If there is uncertainty, then go for the second scenario.
The second roll in groups. First one, check. If everything is ok, then three (or 10), look at them. If everything is ok for all 3 (10), then either roll it all at once, or in small groups (the serial key in the playbook), it depends on the specifics of your servers.

Answer 2

It depends purely on your situation.
If the updates are not critical, then you can run the script, it will be automatically executed on all 500 servers in parallel, quickly and simply