Open-source infrastructure-as-code software
668 open-source libraries, tools and applications tagged infrastructure-as-code, ranked by how closely infrastructure-as-code is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
668 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| TencentBlueKing/bk-cmdb BlueKing CMDB is an enterprise-grade configuration management database (CMDB) platform for managing IT assets, applications, and business t… | 77 | 5755 | active |
| Karmada Karmada is an open-source Kubernetes management system that orchestrates cloud-native applications across multiple Kubernetes clusters and … | 94 | 5729 | active |
| CRI-O CRI-O is a lightweight, OCI-compliant container runtime that implements the Kubernetes Container Runtime Interface (CRI). It lets Kubernete… | 95 | 5676 | stable |
| Snyk CLI The Snyk CLI is a command-line tool that scans projects for security vulnerabilities across open-source dependencies, application code, con… | 97 | 5668 | active |
| next-terminal/next-terminal Next Terminal is an open-source bastion host (jump server) and interactive session auditing system supporting SSH, RDP, VNC, Telnet, HTTP, … | 96 | 5647 | active |
| kubernetes-sigs/descheduler Descheduler is a Kubernetes component that evicts pods whose original scheduling decisions no longer make sense, such as pods on under- or … | 98 | 5548 | stable |
| psviderski/uncloud Uncloud is a lightweight, decentralised container orchestration tool that deploys and manages containerised applications across a network o… | 90 | 5528 | active |
| DevSec Hardening Framework An Ansible collection of battle-tested hardening roles for Linux operating systems, SSH, nginx, and MySQL/MariaDB. It automates secure conf… | 95 | 5499 | active |
| openkruise/kruise OpenKruise is a CNCF incubating suite of Kubernetes controllers and CRDs that extends core workload management with advanced capabilities l… | 92 | 5352 | active |
| GlusterFS Gluster is a free and open-source software-defined distributed filesystem that aggregates storage from multiple servers into a single scala… | 66 | 5259 | stable |
| Helmfile Helmfile is a declarative CLI tool for deploying Kubernetes Helm charts, Kustomize configs, and raw manifests as Helm releases from version… | 100 | 5218 | active |
| Harvester Harvester is an open-source hyperconverged infrastructure (HCI) solution built on Kubernetes that runs on bare metal servers, providing int… | 94 | 5215 | stable |
| eksctl-io/eksctl eksctl is the official command-line tool for creating and managing Amazon EKS (Elastic Kubernetes Service) clusters, written in Go and buil… | 99 | 5214 | active |
| tianshiyeben/wgcloud WGCLOUD is a lightweight, distributed IT operations monitoring platform built on SpringBoot with a Go-based agent, designed for fast deploy… | 92 | 5187 | active |
| vllm-project/aibrix AIBrix is an open-source, cloud-native framework from the vLLM project providing essential building blocks for scalable, cost-efficient Gen… | 88 | 5149 | active |
| gnmyt/Nexterm Nexterm is an open-source, self-hosted server management application providing SSH, VNC, and RDP remote access through a web interface. It … | 86 | 5084 | active |
| diggerhq/digger Digger (now rebranded OpenTaco) is an open-source Infrastructure-as-Code orchestration tool that runs Terraform plan and apply directly ins… | 94 | 5048 | active |
| hashicorp/terraform-provider-azurerm The official Terraform provider plugin for Azure Resource Manager, enabling declarative management of Azure resources via HashiCorp Terrafo… | 95 | 4978 | active |
| tfutils/tfenv tfenv is a Terraform version manager written in Bash, inspired by rbenv. It lets developers install, switch, pin, and list multiple Terrafo… | 83 | 4973 | active |
| cloudtools/troposphere A Python library for programmatically generating AWS CloudFormation templates as JSON or YAML. It provides typed classes for AWS resources … | 94 | 4942 | stable |
| Greenbone Community Edition OpenVAS Scanner is the scan engine of the Greenbone Community Edition, executing a continuously updated feed of vulnerability tests against… | 95 | 4868 | active |
| cdk8s cdk8s is an open-source software development framework for defining Kubernetes applications and reusable abstractions using familiar progra… | 67 | 4858 | active |
| LXD LXD is a system container and virtual machine manager that provides a unified, cloud-like experience for running full Linux systems in LXC … | 98 | 4836 | stable |
| terraform-docs terraform-docs is a CLI utility that generates documentation from Terraform modules in various output formats such as Markdown, AsciiDoc, J… | 84 | 4827 | stable |
| Consul A daemon and CLI tool from HashiCorp that queries Consul, Vault, or Nomad and renders template files with the resulting data. It can also r… | 93 | 4822 | stable |
| werf werf is a CNCF Sandbox CLI tool that implements full-cycle CI/CD for Kubernetes, integrating with your CI system to build, publish, test, a… | 93 | 4727 | stable |
| acassen/keepalived Keepalived is a routing daemon written in C that provides load balancing and high availability for Linux systems. It implements VRRP v2/v3 … | 75 | 4715 | stable |
| HAMi HAMi (Heterogeneous AI Computing Virtualization Middleware) is a CNCF Incubating, Kubernetes-native GPU virtualization and scheduling middl… | 91 | 4691 | active |
| deuxfleurs-org/garage Garage is an S3-compatible distributed object storage service written in Rust, designed for self-hosting at small-to-medium scale. It repli… | 76 | 4678 | active |
| cloudflare/workers-sdk The Cloudflare Workers SDK is a monorepo containing Wrangler, the official CLI for building, testing, and deploying Cloudflare Workers serv… | 95 | 4612 | active |
| Virtual Kubelet Virtual Kubelet is an open-source Kubernetes kubelet implementation that masquerades as a kubelet to connect Kubernetes clusters to other A… | 88 | 4575 | active |
| Taiko Taiko Alethia is the monorepo for Taiko, the first type-1 (Ethereum-equivalent) based rollup protocol on Ethereum, where L1 validators sequ… | 98 | 4552 | active |
| hestiacp/hestiacp Hestia Control Panel is an open-source, lightweight web hosting control panel for Linux servers that provides a web and CLI interface for m… | 98 | 4530 | active |
| PowerDNS/pdns PowerDNS is a suite of open-source DNS software written in C++, comprising the Authoritative Server, the Recursor, and dnsdist. It provides… | 75 | 4473 | stable |
| DPDK/dpdk DPDK is a set of C libraries and NIC drivers for fast userspace packet processing, bypassing the kernel network stack. It supports multiple… | 77 | 4452 | stable |
| Slurm Slurm is an open-source, highly scalable cluster resource management and job scheduling system for Linux clusters. It allocates compute nod… | 100 | 4451 | stable |
| kubernetes/ingress-nginx Ingress NGINX Controller is a Kubernetes ingress controller that uses NGINX as a reverse proxy and load balancer to route external traffic … | 10 | 19446 | maintenance |
| autobase-tech/autobase Autobase is a self-hosted internal database platform for PostgreSQL that delivers a DBaaS-like experience on your own infrastructure. It pr… | 97 | 4412 | active |
| kubernetes-sigs/aws-load-balancer-controller A Kubernetes controller that manages AWS Elastic Load Balancers for a cluster. It provisions Application Load Balancers for Ingress resourc… | 99 | 4343 | stable |
| kubernetes-sigs/cluster-api Cluster API is a Kubernetes subproject providing declarative APIs and tooling for provisioning, upgrading, and operating multiple Kubernete… | 95 | 4336 | stable |
| purpleidea/mgmt mgmt is a next-generation distributed, event-driven configuration management tool written in Go, with its own reactive language (mcl) for m… | 86 | 4333 | active |
| FRRouting/frr FRRouting (FRR) is a free, open-source IP routing protocol suite for Linux and Unix platforms, descended from Quagga. It implements and man… | 97 | 4320 | stable |
| open-policy-agent/gatekeeper Gatekeeper is a CNCF policy controller for Kubernetes built on Open Policy Agent (OPA). It enforces admission policies via customizable con… | 97 | 4303 | stable |
| Riemann Riemann is a network event stream processing system written in Clojure that aggregates events from servers and applications. It provides a … | 53 | 4265 | stable |
| OSv OSv is an open-source modular unikernel operating system designed to run single unmodified Linux applications securely as microVMs on top o… | 67 | 4262 | active |
| baidu/braft braft is an industrial-grade C++ implementation of the RAFT consensus algorithm and replicated state machine, built on top of brpc. It is d… | 23 | 4230 | stable |
| cartography-cncf/cartography Cartography is a Python CLI tool that ingests infrastructure assets and their relationships from 30+ platforms (AWS, GCP, Azure, Kubernetes… | 100 | 4147 | active |
| mlabouardy/komiser Komiser is an open-source, cloud-agnostic inspector that builds an inventory of cloud resources across AWS, GCP, Azure, DigitalOcean, and m… | 76 | 4144 | active |
| osrg/gobgp GoBGP is an open-source Border Gateway Protocol (BGP) implementation written in Go, usable both as a standalone BGP daemon with a CLI and a… | 95 | 4116 | active |
| CODO CODO (opendevops) is an open-source, one-stop enterprise operations platform for managing multi-cloud and hybrid cloud environments with au… | 63 | 4102 | active |
| Boundary HashiCorp Boundary is an identity-aware proxy that provides secure, least-privilege access to hosts and critical systems across clouds and … | 10 | 4067 | active |
| varnishcache/varnish-cache Varnish Cache is a high-performance open-source HTTP accelerator and reverse caching proxy written in C, serving cached responses from memo… | 10 | 4044 | active |
| postgresml/pgcat PgCat is a PostgreSQL connection pooler and proxy written in Rust, similar to PgBouncer, with support for sharding, load balancing, failove… | 34 | 4022 | stable |
| openvswitch/ovs Open vSwitch is a production-quality multilayer software switch designed for virtualized server environments, written primarily in C. It su… | 75 | 4017 | stable |
| kubernetes/kubeadm Kubeadm is a CLI tool that provides best-practice fast paths for creating Kubernetes clusters, bootstrapping control-plane and worker nodes… | 72 | 4004 | stable |
| Netflix/chaosmonkey Chaos Monkey is a chaos engineering tool from Netflix that randomly terminates virtual machine instances and containers in production to te… | 23 | 17146 | maintenance |
| DNSControl/dnscontrol DNSControl is an infrastructure-as-code tool for managing DNS zones and registrars via a JavaScript-compatible DSL. It pushes DNS records t… | 99 | 3969 | active |
| projectcontour/contour Contour is a Kubernetes ingress controller that acts as the control plane for the Envoy proxy, deploying Envoy as a reverse proxy and load … | 96 | 3953 | active |
| ansible/ansible-lint ansible-lint is a command-line linter that checks Ansible playbooks and roles for practices and behavior that could be improved, and can au… | 98 | 3918 | active |
| kube-rs/kube kube is a Rust client for Kubernetes, modeled after client-go, with an async controller runtime inspired by controller-runtime and derive m… | 91 | 3847 | stable |
| OffchainLabs/prysm Prysm is a Go implementation of the Ethereum Consensus (proof of stake) specification, developed by Offchain Labs. It runs beacon chain nod… | 99 | 3789 | active |
| gofireflyio/aiac aiac is a command line tool and Go library that uses LLM providers such as OpenAI, Amazon Bedrock, and Ollama to generate Infrastructure-as… | 52 | 3786 | active |
| antonbabenko/pre-commit-terraform A collection of git hooks for Terraform, OpenTofu, and Terragrunt driven by the pre-commit framework. It automatically formats code and run… | 98 | 3784 | active |
| aquasecurity/cloudsploit CloudSploit by Aqua is an open-source Cloud Security Posture Management (CSPM) tool that scans cloud infrastructure accounts for misconfigu… | 66 | 3777 | active |
| octodns/octodns octoDNS is a Python tool for managing DNS records as code across multiple DNS providers. It uses a pluggable architecture so DNS zone confi… | 77 | 3773 | stable |
| sozu-proxy/sozu Sōzu is a fast, always-up HTTP and TCP reverse proxy written in Rust that can be reconfigured at runtime without reloads and upgrades itsel… | 100 | 3742 | active |
| vitobotta/hetzner-k3s hetzner-k3s is a CLI tool written in Crystal that creates production-ready Kubernetes (k3s) clusters on Hetzner Cloud from a single YAML co… | 90 | 3694 | active |
| AWX AWX is a web-based UI, REST API, and task engine built on top of Ansible, serving as the upstream project for Red Hat Ansible Automation Pl… | 68 | 15599 | maintenance |
| Bicep Bicep is a declarative infrastructure-as-code language and toolchain for describing and deploying Azure resources, compiling down to ARM te… | 95 | 3657 | active |
| moby/swarmkit SwarmKit is a Go toolkit for orchestrating distributed systems, providing Raft-based consensus, node discovery, task scheduling, and servic… | 77 | 3652 | active |
| Terramate Terramate is an open-source Infrastructure as Code orchestration and code generation platform written in Go, designed to help Terraform, Op… | 95 | 3633 | active |
| stackrox/kube-linter KubeLinter is a static analysis CLI tool that checks Kubernetes YAML files, Helm charts, and Kustomize manifests against security and produ… | 84 | 3527 | active |
| databus23/helm-diff A Helm plugin that previews what a `helm upgrade` would change by generating a diff between the deployed release and the newly rendered man… | 99 | 3504 | active |
| gardener/gardener Gardener is a Kubernetes-native system for managing the full lifecycle of homogeneous Kubernetes clusters at scale across any cloud or infr… | 95 | 3471 | active |
| sourcegraph/checkup Checkup is a distributed, lock-free, self-hosted health check and status page tool written in Go, offering both a CLI and an idiomatic Go l… | 66 | 3459 | active |
| digitalocean/doctl doctl is the official command-line interface for the DigitalOcean API, written in Go. It lets users manage droplets, Kubernetes clusters, d… | 95 | 3456 | active |
| nixos-anywhere nixos-anywhere is a CLI tool that installs NixOS on remote machines over SSH in a single unattended command. It handles disk partitioning v… | 76 | 3455 | active |
| guohongze/adminset AdminSet is a self-hosted, fully automated IT operations (DevOps) platform built on Django, integrating CMDB asset management, automated co… | 35 | 3453 | active |
| FairwindsOps/polaris Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration against 30+ built-in best-pract… | 97 | 3396 | active |
| FairwindsOps/goldilocks Goldilocks is a Kubernetes utility that helps identify a starting point for resource requests and limits by creating a Vertical Pod Autosca… | 93 | 3355 | active |
| im2nguyen/rover Rover is an interactive Terraform visualizer that parses Terraform plan files and configuration to generate a resource overview, map, and g… | 34 | 3348 | active |
| facebook/mcrouter Mcrouter is a memcached protocol router developed by Facebook for scaling memcached deployments, handling nearly 5 billion requests per sec… | 68 | 3333 | stable |
| disko disko is a declarative disk partitioning and formatting tool for NixOS that lets you define disks, partitions, filesystems, and mount point… | 80 | 3332 | active |
| operacle/checkcle CheckCle is a self-hosted, open-source monitoring platform for real-time uptime and infrastructure monitoring of servers, applications, and… | 59 | 3275 | active |
| open-policy-agent/conftest Conftest is a CLI utility for writing tests against structured configuration data using the Open Policy Agent Rego language. It validates f… | 98 | 3274 | active |
| vitodeploy/vito Vito is a free, self-hosted web application for managing servers and deploying PHP applications like Laravel to production. It provides a c… | 94 | 3250 | active |
| iqiyi/dpvs DPVS is a high-performance Layer-4 load balancer built on DPDK, derived from LVS and running entirely in user space with kernel bypass. It … | 53 | 3244 | active |
| openstack/nova OpenStack Nova is the compute service of OpenStack, acting as a cloud computing fabric controller that provisions and manages virtual machi… | 77 | 3237 | active |
| yannh/kubeconform Kubeconform is a fast Kubernetes manifest validator written in Go, inspired by Kubeval. It validates YAML manifests against JSON schemas, s… | 72 | 3210 | active |
| gruntwork-io/cloud-nuke cloud-nuke is a Go CLI tool that deletes all resources in a cloud account (primarily AWS, supporting 125+ resource types), designed for cle… | 91 | 3193 | active |
| Mic92/sops-nix sops-nix is a NixOS module that provides atomic, declarative secret provisioning based on Mozilla's sops. It decrypts sops-encrypted files … | 66 | 3172 | active |
| geohot/minikeyvalue A ~1000 line distributed key-value store written in Go, using nginx as volume servers and LevelDB for indexing, with replication and rebala… | 32 | 3158 | stable |
| nuver-labs/vps-audit A dependency-free Bash script that audits Linux VPS security and performance, running 18 graded checks covering SSH configuration, firewall… | 81 | 3132 | active |
| Barre/ZeroFS ZeroFS is a log-structured filesystem written in Rust that turns S3-compatible object storage (Amazon S3, GCS, Azure Blob, or any S3-compat… | 80 | 3125 | active |
| zegl/kube-score kube-score is a static code analysis tool for Kubernetes object definitions that scores manifests and Helm charts against reliability and s… | 57 | 3105 | active |
| Apache CloudStack Apache CloudStack is an open-source Infrastructure as a Service (IaaS) platform for deploying and managing large networks of virtual machin… | 97 | 3090 | stable |
| kubernetes-sigs/kro kro (Kube Resource Orchestrator) is a Kubernetes-native controller that lets you define custom APIs composed of groups of Kubernetes resour… | 88 | 3077 | active |
| Azure Service Fabric Service Fabric is a distributed systems platform for packaging, deploying, and managing stateless and stateful microservices and containers… | 75 | 3065 | active |
| kubernetes-sigs/nfs-subdir-external-provisioner A Kubernetes dynamic volume provisioner that automatically creates Persistent Volumes on an existing NFS server, placing each volume in a s… | 53 | 3048 | active |
| kubernetes-sigs/gateway-api Kubernetes Gateway API is the official successor to Ingress, providing a role-oriented, expressive specification and CRDs for L4/L7 routing… | 95 | 3026 | stable |