domain: infrastructure-as-code
663 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| kubernetes/kubernetes Kubernetes (K8s) is an open-source container orchestration system for automating the deployment, scaling, and management of containerized a… | 95 | 125208 | stable |
| Ansible Ansible is an agentless IT automation platform written in Python that handles configuration management, application deployment, cloud provi… | 94 | 70474 | stable |
| FuelLabs/fuel-core fuel-core is the Rust full node implementation of the Fuel v2 blockchain protocol, aggregating all Fuel services and business logic into a … | 94 | 56885 | active |
| etcd etcd is a distributed, reliable key-value store built on the Raft consensus algorithm, designed for storing the most critical data of distr… | 97 | 52180 | stable |
| hashicorp/terraform Terraform is HashiCorp's infrastructure-as-code tool that codifies cloud and on-prem resources into declarative configuration files which c… | 99 | 49543 | stable |
| Serverless Framework The Serverless Framework is a CLI tool and framework that deploys code and cloud infrastructure together using simple YAML syntax, primaril… | 95 | 46918 | active |
| mingrammer/diagrams Diagrams is a Python library for drawing cloud system architecture diagrams as code, rendering them via Graphviz. It provides node icons fo… | 84 | 42554 | stable |
| portainer/portainer Portainer Community Edition is a lightweight, self-hosted web UI and API for managing Docker, Docker Swarm, Kubernetes, and Azure ACI conta… | 95 | 38350 | stable |
| K3s K3s is a fully conformant, production-ready lightweight Kubernetes distribution packaged as a single binary under 100MB. It bundles contain… | 94 | 33828 | stable |
| rustfs/rustfs RustFS is a high-performance, distributed, S3-compatible object storage system written in Rust, positioned as an Apache 2.0-licensed altern… | 80 | 31446 | active |
| opentofu/opentofu OpenTofu is an open-source infrastructure-as-code CLI tool for declaratively building, changing, and versioning cloud infrastructure, forke… | 95 | 29937 | stable |
| SST SST is a framework for building and deploying modern full-stack applications on your own cloud infrastructure, with the entire app defined … | 89 | 26260 | active |
| rancher/rancher Rancher is an open-source container management platform for deploying and operating Kubernetes clusters across datacenters, clouds, and edg… | 95 | 25873 | stable |
| Pulumi Pulumi is an open-source infrastructure-as-code platform that lets you define, deploy, and manage cloud infrastructure using general-purpos… | 95 | 25612 | stable |
| Argo CD Argo CD is a declarative GitOps continuous delivery tool for Kubernetes that keeps Git repositories as the source of truth for desired appl… | 94 | 24005 | stable |
| netbox-community/netbox NetBox is an open-source web application that serves as the source of truth for network infrastructure, combining IP address management (IP… | 95 | 21394 | stable |
| containerd/containerd containerd is an industry-standard container runtime daemon that manages the complete container lifecycle of a host system, including image… | 98 | 21187 | stable |
| gravitational/teleport Teleport is an identity-aware access proxy and certificate authority that provides unified, credential-free access to SSH servers, Kubernet… | 93 | 20852 | stable |
| nginx-proxy nginx-proxy is an automated Nginx reverse proxy for Docker that uses docker-gen to generate Nginx configuration and reload it as containers… | 97 | 19897 | active |
| hashicorp/nomad HashiCorp Nomad is a flexible, single-binary workload orchestrator that deploys and manages containers, non-containerized applications, bat… | 94 | 16837 | stable |
| kubernetes/kops kOps (Kubernetes Operations) is a CLI tool for creating, upgrading, and maintaining production-grade, highly available Kubernetes clusters,… | 98 | 16669 | active |
| systemd/systemd systemd is a suite of basic building blocks for a Linux system, providing a system and service manager that runs as PID 1 and starts the re… | 97 | 16630 | stable |
| hashicorp/packer HashiCorp Packer is a CLI tool that builds identical machine images (AMIs, VMDK, Docker images, etc.) for multiple platforms in parallel fr… | 93 | 15768 | stable |
| saltstack/salt Salt is a Python-based, event-driven automation framework for deploying, configuring, and managing IT infrastructure at scale using a maste… | 98 | 15637 | stable |
| DaoCloud/public-image-mirror A public container image mirror service by DaoCloud that accelerates pulling images from foreign registries like gcr.io, ghcr.io, quay.io, … | 77 | 14949 | active |
| coredns/coredns CoreDNS is a fast and flexible DNS server and forwarder written in Go that chains plugins, each performing a DNS function. It is a CNCF gra… | 95 | 14280 | stable |
| semaphoreui/semaphore Semaphore UI is an open-source, self-hosted web UI and API for running Ansible playbooks, Terraform/OpenTofu/Terragrunt, Bash, PowerShell, … | 95 | 14058 | active |
| aws/aws-cdk The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure in code using familiar programming langua… | 95 | 12876 | stable |
| apache/zookeeper Apache ZooKeeper is a high-performance, fault-tolerant coordination service for distributed applications, exposing a hierarchical key-value… | 77 | 12795 | stable |
| Infracost Infracost is a cloud cost intelligence tool that estimates monthly costs and flags FinOps best practices for Terraform, Terragrunt, CloudFo… | 88 | 12492 | active |
| encoredev/encore Encore is an open-source infrastructure SDK and backend framework for TypeScript and Go that lets developers declare resources like databas… | 95 | 12307 | active |
| ubicloud/ubicloud Ubicloud is an open-source IaaS cloud platform that provides elastic compute (VMs), block storage, networking, load balancing, managed Post… | 76 | 12254 | active |
| future-architect/vuls Vuls is an agent-less vulnerability scanner written in Go that detects CVEs on Linux, FreeBSD, Windows, macOS, containers, WordPress, progr… | 98 | 12243 | active |
| netbootxyz/netboot.xyz netboot.xyz is an iPXE-based network bootloader that presents a menu of operating system installers, live distros, and rescue tools that ar… | 89 | 12193 | active |
| open-policy-agent/opa Open Policy Agent (OPA) is a general-purpose, open-source policy engine that unifies policy enforcement across the stack using a high-level… | 99 | 12164 | stable |
| kubernetes-sigs/kustomize kustomize is a template-free tool for customizing raw Kubernetes YAML configuration files, letting users declare overlays, patches, and com… | 89 | 12145 | stable |
| moghtech/komodo Komodo is a self-hosted web application for building and deploying software across many servers, managing Docker containers, compose stacks… | 98 | 12089 | active |
| crossplane/crossplane Crossplane is a CNCF framework for building cloud native control planes on top of Kubernetes without writing code. It lets platform teams d… | 95 | 11979 | stable |
| TwiN/gatus Gatus is a self-hosted, developer-oriented health dashboard and status page that monitors services via HTTP, ICMP, TCP, and DNS checks with… | 94 | 11906 | stable |
| MinIO MinIO is a high-performance, S3-compatible object storage server written in Go, released under AGPLv3, with client SDKs (Go, Java, JS, Pyth… | 10 | 61374 | maintenance |
| meshery/meshery Meshery is an open-source, self-service engineering platform for collaboratively designing, deploying, and managing Kubernetes and cloud na… | 95 | 11583 | active |
| TencentCloud/CubeSandbox CubeSandbox is a high-performance sandbox service for AI agents built on RustVMM and KVM, creating hardware-isolated MicroVM sandboxes in u… | 81 | 11354 | active |
| vCluster vCluster is an open-source tool that creates fully functional virtual Kubernetes clusters, each running inside a namespace of an underlying… | 94 | 11275 | stable |
| hashicorp/terraform-provider-aws The official Terraform provider plugin for Amazon Web Services, written in Go and maintained by HashiCorp. It enables Terraform to define, … | 95 | 11047 | stable |
| siderolabs/talos Talos Linux is a minimal, immutable, API-managed Linux distribution purpose-built for running Kubernetes. It ships no shell, SSH, or packag… | 99 | 11024 | stable |
| bluewave-labs/Checkmate Checkmate is an open-source, self-hosted infrastructure and uptime monitoring platform by Bluewave Labs. It tracks server hardware, uptime,… | 91 | 10757 | active |
| distribution/distribution The CNCF Distribution project provides the open-source Registry, a stateless, scalable server-side application implementing the OCI Distrib… | 82 | 10583 | stable |
| kedacore/keda KEDA is a Kubernetes-based event-driven autoscaler that scales any container workload based on the number of events needing processing, usi… | 94 | 10471 | stable |
| stakater/Reloader Reloader is a Kubernetes controller written in Go that watches for changes to ConfigMaps, Secrets, and CSI-mounted secrets, and automatical… | 98 | 10367 | active |
| kubernetes/client-go The official Go client library for the Kubernetes API, providing typed clientsets, a dynamic client, API discovery, authentication plugins,… | 77 | 9868 | stable |
| gruntwork-io/terragrunt Terragrunt is a flexible orchestration tool that lets Infrastructure as Code written in OpenTofu/Terraform scale, adding a configuration an… | 94 | 9808 | stable |
| aws/serverless-application-model The AWS Serverless Application Model (SAM) transform is a CloudFormation macro, published as the aws-sam-translator Python package, that co… | 95 | 9561 | active |
| kubernetes-sigs/kubebuilder Kubebuilder is an SDK and scaffolding framework for building Kubernetes APIs and controllers in Go using custom resource definitions (CRDs)… | 92 | 9294 | stable |
| bitnami/sealed-secrets A Kubernetes controller plus the kubeseal CLI that lets you encrypt Kubernetes Secrets into one-way encrypted SealedSecrets that are safe t… | 99 | 9256 | active |
| runatlantis/atlantis Atlantis is a self-hosted Go application that automates Terraform workflows through pull requests. It listens for webhook events from GitHu… | 95 | 9255 | stable |
| Supervisor Supervisor is a client/server process control system for UNIX-like operating systems that starts, stops, restarts, and monitors processes a… | 58 | 9108 | stable |
| kubernetes-sigs/external-dns ExternalDNS is a Kubernetes controller that synchronizes exposed Kubernetes Services and Ingresses with external DNS providers such as AWS … | 99 | 9071 | stable |
| bridgecrewio/checkov Checkov is a static code analysis tool for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, and more) that … | 95 | 8973 | stable |
| kubernetes/autoscaler The official Kubernetes autoscaling repository containing the Cluster Autoscaler, Vertical Pod Autoscaler, and Addon Resizer components. It… | 94 | 8950 | stable |
| ariga/atlas Atlas is a language-agnostic CLI tool for managing and migrating database schemas as code, supporting declarative (Terraform-like) and vers… | 92 | 8685 | stable |
| prometheus/alertmanager Alertmanager is the Prometheus project's alert handling component, written in Go. It receives alerts from Prometheus servers or other clien… | 95 | 8594 | stable |
| ko-build/ko ko is a fast, simple container image builder for Go applications that runs go build locally without requiring Docker. It supports multi-pla… | 85 | 8511 | stable |
| Flux Flux v2 is an open and extensible continuous delivery solution for Kubernetes that keeps clusters in sync with Git repositories and OCI art… | 98 | 8371 | stable |
| metallb/metallb MetalLB is a network load-balancer implementation for bare-metal Kubernetes clusters that provides Services of type LoadBalancer using stan… | 94 | 8333 | active |
| databasus/databasus Databasus is a free, open-source, self-hosted backup tool for PostgreSQL (plus MySQL, MariaDB, and MongoDB) with Point-in-Time Recovery via… | 81 | 8309 | active |
| chef/chef Chef Infra is a configuration management platform that turns infrastructure into code, automating how systems are configured, deployed, and… | 67 | 8231 | active |
| kyverno/kyverno Kyverno is a Kubernetes-native policy engine for policy as code, letting platform teams author validate, mutate, generate, and cleanup poli… | 99 | 8075 | stable |
| ajenti/ajenti Ajenti is a modular Linux and BSD server administration panel built with Python 3 and AngularJS. It ships with many stock plugins for syste… | 85 | 7962 | active |
| gruntwork-io/terratest Terratest is a Go library that makes it easier to write automated tests for infrastructure code such as Terraform, Packer, Docker, Kubernet… | 92 | 7943 | stable |
| longhorn/longhorn Longhorn is a cloud-native distributed block storage system for Kubernetes that adds persistent volume support to any cluster with a single… | 98 | 7938 | stable |
| puppetlabs/puppet Puppet is a server automation framework and application that manages the configuration of Linux, Unix, and Windows systems based on a centr… | 77 | 7923 | active |
| warp-tech/warpgate Warpgate is an open-source, clientless bastion host and privileged access management (PAM) tool written in Rust that transparently proxies … | 99 | 7726 | active |
| aws/karpenter-provider-aws Karpenter is an open-source Kubernetes node autoscaler that watches for unschedulable pods, provisions right-sized nodes to meet their sche… | 95 | 7706 | active |
| operator-framework/operator-sdk The Operator SDK is a framework and CLI for building Kubernetes Operators, part of the Operator Framework. It provides high-level APIs buil… | 92 | 7674 | stable |
| Jsonnet Jsonnet is a data templating configuration language that extends JSON with functions, variables, object-orientation, and imports to elimina… | 69 | 7562 | stable |
| OneUptime/oneuptime OneUptime is a complete open-source monitoring and observability platform combining uptime monitoring, incident management, on-call schedul… | 95 | 7521 | active |
| fabiolb/fabio Fabio is an HTTP, HTTPS, TCP, and gRPC reverse proxy and load balancer that configures itself dynamically from service data stored in Consu… | 94 | 7338 | active |
| kubevirt/kubevirt KubeVirt is a virtual machine management add-on for Kubernetes that extends the Kubernetes API with virtualization resource types (like the… | 98 | 7030 | stable |
| katanemo/plano Plano is an AI-native proxy server and data plane for agentic applications, built on Envoy by its core contributors. It centralizes agent r… | 85 | 7017 | active |
| agones-dev/agones Agones is an open-source Kubernetes controller and custom resource definitions (GameServers, Fleets) for hosting, running, and scaling dedi… | 94 | 6995 | stable |
| sysown/proxysql ProxySQL is a high-performance, protocol-aware SQL proxy for MySQL, MariaDB, Percona Server, and PostgreSQL that sits between applications … | 94 | 6904 | stable |
| haproxy/haproxy HAProxy is a fast, reliable open-source reverse proxy and load balancer for TCP and HTTP-based applications, providing high availability, T… | 77 | 6809 | stable |
| rcourtman/Pulse Pulse is a self-hosted infrastructure monitoring application for Proxmox, Docker, Kubernetes, TrueNAS, and vSphere, combining live state, h… | 83 | 6624 | active |
| ethereum-optimism/optimism Optimism is the open-source OP Stack, a modular software stack for deploying Ethereum Layer 2 optimistic rollup blockchains such as OP Main… | 95 | 6465 | active |
| k0sproject/k0s k0s is an open-source, all-inclusive CNCF-certified Kubernetes distribution packaged as a single binary with zero host OS dependencies beyo… | 94 | 6452 | active |
| Zabbix Zabbix is an enterprise-class open-source distributed monitoring and observability platform for tracking the performance and availability o… | 77 | 6313 | stable |
| rundeck/rundeck Rundeck is an open-source runbook automation and orchestration service with a web console, CLI tools, and WebAPI for standardizing and sche… | 94 | 6277 | active |
| bfenetworks/bfe BFE (Beyond Front End) is a modern layer 7 load balancer and reverse proxy written in Go, originally developed at Baidu and now a CNCF sand… | 95 | 6261 | active |
| cloud-hypervisor/cloud-hypervisor Cloud Hypervisor is an open source Virtual Machine Monitor (VMM) written in Rust that runs on top of KVM or Microsoft's MSHV hypervisor. It… | 93 | 6149 | active |
| CNI (Container Network Interface) CNI (Container Network Interface) is a CNF project consisting of a specification and Go libraries for writing plugins that configure networ… | 66 | 6102 | stable |
| cloud-custodian/cloud-custodian Cloud Custodian (c7n) is a Python-based stateless rules engine for managing public cloud accounts and resources via YAML policy DSLs with f… | 90 | 6053 | stable |
| pyinfra-dev/pyinfra pyinfra is an agentless infrastructure automation tool that turns Python code into shell commands and executes them over SSH, locally, or a… | 94 | 5965 | active |
| pixlcore/xyops xyOps is a self-hosted platform combining job scheduling, visual workflow automation, server monitoring, alerting, and incident response in… | 78 | 5927 | active |
| hashicorp/hcl HCL (HashiCorp Configuration Language) is a Go toolkit for building structured, human- and machine-friendly configuration languages, used b… | 67 | 5798 | stable |
| terraform-linters/tflint TFLint is a pluggable linter for Terraform that finds possible errors, deprecated syntax, and unused declarations, and enforces best practi… | 93 | 5796 | active |
| paradigmxyz/reth Reth is a production-ready, modular Ethereum execution layer client written in Rust, usable both as a full node binary and as a set of comp… | 99 | 5751 | stable |
| TencentBlueKing/bk-cmdb BlueKing CMDB is an enterprise-grade configuration management database (CMDB) platform for managing IT assets, applications, and business t… | 77 | 5742 | active |
| cri-o/cri-o CRI-O is a lightweight, OCI-compliant container runtime that implements the Kubernetes Container Runtime Interface (CRI). It lets Kubernete… | 95 | 5654 | stable |
| snyk/cli The Snyk CLI is a command-line tool that scans projects for security vulnerabilities across open-source dependencies, application code, con… | 99 | 5649 | active |
| next-terminal/next-terminal Next Terminal is an open-source bastion host (jump server) and interactive session auditing system supporting SSH, RDP, VNC, Telnet, HTTP, … | 99 | 5612 | active |
page 1 / 7 next →