Ansible needs the sudo password to escalate privileges on the remote host. The challenge is getting that password to Ansible without: Storing it in plaintext in version control Exposing it in shell ...
Tracing every single request in production is rarely practical. The storage costs add up fast, the tracing backend gets overwhelmed, and the Envoy sidecars spend resources generating and sending spans ...