Open-source infrastructure-as-code software
668 open-source libraries, tools and applications tagged infrastructure-as-code, ranked by how closely infrastructure-as-code is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
668 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Kubernetes Kubernetes is an open‑source system for automating deployment, scaling, and management of containerized applications across clusters of hos… | 94 | 128491 | active |
| Kubernetes Kubernetes (K8s) is an open-source container orchestration system for automating the deployment, scaling, and management of containerized a… | 94 | 128491 | stable |
| Moby Moby is an open-source framework that provides a modular set of container components and tools for building custom container-based systems.… | 92 | 72118 | active |
| Ansible Ansible is an open‑source IT automation engine that uses simple, human‑readable YAML playbooks to configure systems, deploy applications, a… | 94 | 70871 | active |
| Coolify Coolify is an open‑source, self‑hostable PaaS that lets you deploy static sites, APIs, databases and Docker‑based services on your own serv… | 95 | 62835 | active |
| FuelLabs/fuel-core fuel-core is the Rust full node implementation of the Fuel v2 blockchain protocol, aggregating all Fuel services and business logic into a … | 97 | 56803 | active |
| Terraform Terraform is a command‑line tool that lets you define, provision, and manage infrastructure across many cloud providers using declarative c… | 100 | 49931 | active |
| Terraform Terraform is HashiCorp's infrastructure-as-code tool that codifies cloud and on-prem resources into declarative configuration files which c… | 100 | 49931 | stable |
| Serverless Framework The Serverless Framework is a CLI tool and framework that deploys code and cloud infrastructure together using simple YAML syntax, primaril… | 93 | 46916 | active |
| Portainer Portainer Community Edition is a lightweight, self-hosted web UI and API for managing Docker, Docker Swarm, Kubernetes, and Azure ACI conta… | 92 | 38562 | stable |
| Dokploy Dokploy is an open‑source, self‑hosted Platform as a Service that simplifies deploying applications and databases. It provides a web UI, CL… | 87 | 37756 | active |
| 1Panel-dev/1Panel 1Panel is an open-source web-based Linux server management panel that also provides lightweight AI management capabilities. It offers a gra… | 98 | 37152 | active |
| RustFS RustFS is a high-performance, distributed, S3-compatible object storage system written in Rust, positioned as an Apache 2.0-licensed altern… | 95 | 35079 | active |
| k3s K3s is a fully conformant, production-ready lightweight Kubernetes distribution packaged as a single binary under 100MB. It bundles contain… | 95 | 34215 | stable |
| Dokku Dokku is an open‑source, Docker‑powered platform‑as‑a‑service that runs on a single Linux server. It lets you deploy, scale and manage appl… | 94 | 32178 | active |
| OpenTofu OpenTofu is an open‑source, CLI‑driven infrastructure as code tool that lets you define, plan, and apply cloud and on‑prem resources using … | 91 | 30269 | active |
| OpenTofu OpenTofu is an open-source infrastructure-as-code CLI tool for declaratively building, changing, and versioning cloud infrastructure, forke… | 91 | 30269 | stable |
| SST SST is a framework for building and deploying modern full-stack applications on your own cloud infrastructure, with the entire app defined … | 83 | 26341 | active |
| rancher/rancher Rancher is an open‑source container management platform that simplifies deploying and operating Kubernetes clusters across any environment.… | 93 | 25935 | active |
| Pulumi Pulumi is an open‑source infrastructure‑as‑code platform that lets you define cloud resources using familiar programming languages. It prov… | 94 | 25755 | active |
| Argo CD Argo CD is a declarative GitOps continuous delivery tool for Kubernetes that keeps Git repositories as the source of truth for desired appl… | 94 | 24341 | stable |
| Teleport Teleport is an identity-aware access proxy and certificate authority that provides unified, credential-free access to SSH servers, Kubernet… | 88 | 20995 | stable |
| nginx-proxy nginx-proxy is an automated Nginx reverse proxy for Docker that uses docker-gen to generate Nginx configuration and reload it as containers… | 93 | 19917 | active |
| Nomad HashiCorp Nomad is a flexible, single-binary workload orchestrator that deploys and manages containers, non-containerized applications, bat… | 94 | 17012 | stable |
| systemd/systemd systemd is a suite of basic building blocks for a Linux system, providing a system and service manager that runs as PID 1 and starts the re… | 96 | 16851 | stable |
| kubernetes/kops kOps (Kubernetes Operations) is a CLI tool for creating, upgrading, and maintaining production-grade, highly available Kubernetes clusters,… | 96 | 16692 | active |
| hashicorp/packer HashiCorp Packer is a CLI tool that builds identical machine images (AMIs, VMDK, Docker images, etc.) for multiple platforms in parallel fr… | 94 | 15807 | stable |
| saltstack/salt Salt is a Python-based, event-driven automation framework for deploying, configuring, and managing IT infrastructure at scale using a maste… | 94 | 15678 | stable |
| DaoCloud/public-image-mirror A public container image mirror service by DaoCloud that accelerates pulling images from foreign registries like gcr.io, ghcr.io, quay.io, … | 77 | 15186 | active |
| CoreDNS CoreDNS is a fast and flexible DNS server and forwarder written in Go that chains plugins, each performing a DNS function. It is a CNCF gra… | 92 | 14365 | stable |
| semaphoreui/semaphore Semaphore UI is an open-source, self-hosted web UI and API for running Ansible playbooks, Terraform/OpenTofu/Terragrunt, Bash, PowerShell, … | 92 | 14201 | active |
| AWS CDK The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure in code using familiar programming langua… | 95 | 12941 | stable |
| TencentCloud/CubeSandbox CubeSandbox is a high-performance sandbox service for AI agents built on RustVMM and KVM, creating hardware-isolated MicroVM sandboxes in u… | 81 | 12853 | active |
| apache/zookeeper Apache ZooKeeper is a high-performance, fault-tolerant coordination service for distributed applications, exposing a hierarchical key-value… | 76 | 12815 | stable |
| Infracost Infracost is a cloud cost intelligence tool that estimates monthly costs and flags FinOps best practices for Terraform, Terragrunt, CloudFo… | 90 | 12565 | active |
| Encore Encore is an open-source infrastructure SDK and backend framework for TypeScript and Go that lets developers declare resources like databas… | 95 | 12446 | active |
| moghtech/komodo Komodo is a self-hosted web application for building and deploying software across many servers, managing Docker containers, compose stacks… | 95 | 12393 | active |
| ubicloud/ubicloud Ubicloud is an open-source IaaS cloud platform that provides elastic compute (VMs), block storage, networking, load balancing, managed Post… | 76 | 12316 | active |
| netboot.xyz netboot.xyz is an iPXE-based network bootloader that presents a menu of operating system installers, live distros, and rescue tools that ar… | 91 | 12314 | active |
| future-architect/vuls Vuls is an agent-less vulnerability scanner written in Go that detects CVEs on Linux, FreeBSD, Windows, macOS, containers, WordPress, progr… | 98 | 12284 | active |
| open-policy-agent/opa Open Policy Agent (OPA) is a general-purpose, open-source policy engine that unifies policy enforcement across the stack using a high-level… | 96 | 12264 | stable |
| TwiN/gatus Gatus is a self-hosted, developer-oriented health dashboard and status page that monitors services via HTTP, ICMP, TCP, and DNS checks with… | 97 | 12215 | stable |
| kubernetes-sigs/kustomize kustomize is a template-free tool for customizing raw Kubernetes YAML configuration files, letting users declare overlays, patches, and com… | 99 | 12186 | stable |
| Crossplane Crossplane is a CNCF framework for building cloud native control planes on top of Kubernetes without writing code. It lets platform teams d… | 94 | 12137 | stable |
| Meshery Meshery is an open-source, self-service engineering platform for collaboratively designing, deploying, and managing Kubernetes and cloud na… | 95 | 12014 | active |
| vCluster vCluster is an open-source tool that creates fully functional virtual Kubernetes clusters, each running inside a namespace of an underlying… | 96 | 11351 | stable |
| siderolabs/talos Talos Linux is a minimal, immutable, API-managed Linux distribution purpose-built for running Kubernetes. It ships no shell, SSH, or packag… | 96 | 11246 | stable |
| hashicorp/terraform-provider-aws The official Terraform provider plugin for Amazon Web Services, written in Go and maintained by HashiCorp. It enables Terraform to define, … | 95 | 11115 | stable |
| Checkmate Checkmate is an open-source, self-hosted infrastructure and uptime monitoring platform by Bluewave Labs. It tracks server hardware, uptime,… | 91 | 10946 | active |
| distribution/distribution The CNCF Distribution project provides the open-source Registry, a stateless, scalable server-side application implementing the OCI Distrib… | 90 | 10655 | stable |
| KEDA KEDA is a Kubernetes-based event-driven autoscaler that scales any container workload based on the number of events needing processing, usi… | 94 | 10643 | stable |
| stakater/Reloader Reloader is a Kubernetes controller written in Go that watches for changes to ConfigMaps, Secrets, and CSI-mounted secrets, and automatical… | 97 | 10448 | active |
| kubernetes/client-go The official Go client library for the Kubernetes API, providing typed clientsets, a dynamic client, API discovery, authentication plugins,… | 77 | 9908 | stable |
| Terragrunt Terragrunt is a flexible orchestration tool that lets Infrastructure as Code written in OpenTofu/Terraform scale, adding a configuration an… | 94 | 9883 | stable |
| AWS Serverless Application Model (SAM) The AWS Serverless Application Model (SAM) transform is a CloudFormation macro, published as the aws-sam-translator Python package, that co… | 94 | 9574 | active |
| kubernetes-sigs/kubebuilder Kubebuilder is an SDK and scaffolding framework for building Kubernetes APIs and controllers in Go using custom resource definitions (CRDs)… | 94 | 9351 | stable |
| Atlantis Atlantis is a self-hosted Go application that automates Terraform workflows through pull requests. It listens for webhook events from GitHu… | 100 | 9332 | stable |
| bitnami/sealed-secrets A Kubernetes controller plus the kubeseal CLI that lets you encrypt Kubernetes Secrets into one-way encrypted SealedSecrets that are safe t… | 97 | 9300 | active |
| kubernetes-sigs/external-dns ExternalDNS is a Kubernetes controller that synchronizes exposed Kubernetes Services and Ingresses with external DNS providers such as AWS … | 99 | 9125 | stable |
| Supervisor Supervisor is a client/server process control system for UNIX-like operating systems that starts, stops, restarts, and monitors processes a… | 55 | 9124 | stable |
| Checkov Checkov is a static code analysis tool for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, and more) that … | 94 | 9060 | stable |
| kubernetes/autoscaler The official Kubernetes autoscaling repository containing the Cluster Autoscaler, Vertical Pod Autoscaler, and Addon Resizer components. It… | 95 | 8998 | stable |
| databasus/databasus Databasus is a free, open-source, self-hosted backup tool for PostgreSQL (plus MySQL, MariaDB, and MongoDB) with Point-in-Time Recovery via… | 82 | 8847 | active |
| Atlas Atlas is a language-agnostic CLI tool for managing and migrating database schemas as code, supporting declarative (Terraform-like) and vers… | 91 | 8761 | stable |
| prometheus/alertmanager Alertmanager is the Prometheus project's alert handling component, written in Go. It receives alerts from Prometheus servers or other clien… | 92 | 8627 | stable |
| ko ko is a fast, simple container image builder for Go applications that runs go build locally without requiring Docker. It supports multi-pla… | 82 | 8570 | stable |
| Flux v2 Flux v2 is an open and extensible continuous delivery solution for Kubernetes that keeps clusters in sync with Git repositories and OCI art… | 99 | 8445 | stable |
| MetalLB MetalLB is a network load-balancer implementation for bare-metal Kubernetes clusters that provides Services of type LoadBalancer using stan… | 90 | 8355 | active |
| kyverno/kyverno Kyverno is a Kubernetes-native policy engine for policy as code, letting platform teams author validate, mutate, generate, and cleanup poli… | 100 | 8268 | stable |
| chef/chef Chef Infra is a configuration management platform that turns infrastructure into code, automating how systems are configured, deployed, and… | 67 | 8248 | active |
| warp-tech/warpgate Warpgate is an open-source, clientless bastion host and privileged access management (PAM) tool written in Rust that transparently proxies … | 98 | 8038 | active |
| Longhorn Longhorn is a cloud-native distributed block storage system for Kubernetes that adds persistent volume support to any cluster with a single… | 95 | 8038 | stable |
| gruntwork-io/terratest Terratest is a Go library that makes it easier to write automated tests for infrastructure code such as Terraform, Packer, Docker, Kubernet… | 94 | 7981 | stable |
| ajenti/ajenti Ajenti is a modular Linux and BSD server administration panel built with Python 3 and AngularJS. It ships with many stock plugins for syste… | 84 | 7967 | active |
| puppetlabs/puppet Puppet is a server automation framework and application that manages the configuration of Linux, Unix, and Windows systems based on a centr… | 74 | 7936 | active |
| OneUptime OneUptime is a complete open-source monitoring and observability platform combining uptime monitoring, incident management, on-call schedul… | 96 | 7752 | active |
| aws/karpenter-provider-aws Karpenter is an open-source Kubernetes node autoscaler that watches for unschedulable pods, provisions right-sized nodes to meet their sche… | 92 | 7721 | active |
| operator-framework/operator-sdk The Operator SDK is a framework and CLI for building Kubernetes Operators, part of the Operator Framework. It provides high-level APIs buil… | 88 | 7682 | stable |
| Jsonnet Jsonnet is a data templating configuration language that extends JSON with functions, variables, object-orientation, and imports to elimina… | 63 | 7581 | stable |
| fabiolb/fabio Fabio is an HTTP, HTTPS, TCP, and gRPC reverse proxy and load balancer that configures itself dynamically from service data stored in Consu… | 93 | 7346 | active |
| KubeVirt KubeVirt is a virtual machine management add-on for Kubernetes that extends the Kubernetes API with virtualization resource types (like the… | 100 | 7131 | stable |
| katanemo/plano Plano is an AI-native proxy server and data plane for agentic applications, built on Envoy by its core contributors. It centralizes agent r… | 86 | 7092 | active |
| agones-dev/agones Agones is an open-source Kubernetes controller and custom resource definitions (GameServers, Fleets) for hosting, running, and scaling dedi… | 94 | 7062 | stable |
| sysown/proxysql ProxySQL is a high-performance, protocol-aware SQL proxy for MySQL, MariaDB, Percona Server, and PostgreSQL that sits between applications … | 93 | 6940 | stable |
| haproxy/haproxy HAProxy is a fast, reliable open-source reverse proxy and load balancer for TCP and HTTP-based applications, providing high availability, T… | 77 | 6929 | stable |
| rcourtman/Pulse Pulse is a self-hosted infrastructure monitoring application for Proxmox, Docker, Kubernetes, TrueNAS, and vSphere, combining live state, h… | 84 | 6878 | active |
| k0sproject/k0s k0s is an open-source, all-inclusive CNCF-certified Kubernetes distribution packaged as a single binary with zero host OS dependencies beyo… | 94 | 6537 | active |
| Optimism Optimism is the open-source OP Stack, a modular software stack for deploying Ethereum Layer 2 optimistic rollup blockchains such as OP Main… | 95 | 6481 | active |
| Zabbix Zabbix is an enterprise-class open-source distributed monitoring and observability platform for tracking the performance and availability o… | 76 | 6435 | stable |
| cloud-hypervisor/cloud-hypervisor Cloud Hypervisor is an open source Virtual Machine Monitor (VMM) written in Rust that runs on top of KVM or Microsoft's MSHV hypervisor. It… | 95 | 6405 | active |
| Rundeck Rundeck is an open-source runbook automation and orchestration service with a web console, CLI tools, and WebAPI for standardizing and sche… | 93 | 6329 | active |
| BFE BFE (Beyond Front End) is a modern layer 7 load balancer and reverse proxy written in Go, originally developed at Baidu and now a CNCF sand… | 99 | 6264 | active |
| pixlcore/xyops xyOps is a self-hosted platform combining job scheduling, visual workflow automation, server monitoring, alerting, and incident response in… | 78 | 6247 | active |
| CNI (Container Network Interface) CNI (Container Network Interface) is a CNF project consisting of a specification and Go libraries for writing plugins that configure networ… | 84 | 6133 | stable |
| cloud-custodian/cloud-custodian Cloud Custodian (c7n) is a Python-based stateless rules engine for managing public cloud accounts and resources via YAML policy DSLs with f… | 95 | 6088 | stable |
| pyinfra pyinfra is an agentless infrastructure automation tool that turns Python code into shell commands and executes them over SSH, locally, or a… | 89 | 6013 | active |
| GPUStack GPUStack is an open-source GPU cluster manager for AI model serving that orchestrates inference engines like vLLM, SGLang, and TensorRT-LLM… | 88 | 5844 | active |
| paradigmxyz/reth Reth is a production-ready, modular Ethereum execution layer client written in Rust, usable both as a full node binary and as a set of comp… | 99 | 5833 | stable |
| TFLint TFLint is a pluggable linter for Terraform that finds possible errors, deprecated syntax, and unused declarations, and enforces best practi… | 89 | 5827 | active |
| hashicorp/hcl HCL (HashiCorp Configuration Language) is a Go toolkit for building structured, human- and machine-friendly configuration languages, used b… | 87 | 5823 | stable |
page 1 / 7 next →