I love Ansible, and we migrated our Rails deployment from Chef to Ansible. Now we have a subfolder /ops in our project that contains all the code to provision our infrastructure and deploy our app.
However, I still find it very hard to manage updating roles. Git submodules is just terrible, and you can't have a different git repo for each role subfolder. So how do you manage updating third-party roles?