domain: infrastructure-as-code
663 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| karmada-io/karmada Karmada is an open-source Kubernetes management system that orchestrates cloud-native applications across multiple Kubernetes clusters and … | 94 | 5576 | active |
| gpustack/gpustack GPUStack is an open-source GPU cluster manager for AI model serving that orchestrates inference engines like vLLM, SGLang, and TensorRT-LLM… | 90 | 5560 | active |
| kubernetes-sigs/descheduler Descheduler is a Kubernetes component that evicts pods whose original scheduling decisions no longer make sense, such as pods on under- or … | 94 | 5497 | stable |
| psviderski/uncloud Uncloud is a lightweight, decentralised container orchestration tool that deploys and manages containerised applications across a network o… | 87 | 5468 | active |
| dev-sec/ansible-collection-hardening An Ansible collection of battle-tested hardening roles for Linux operating systems, SSH, nginx, and MySQL/MariaDB. It automates secure conf… | 90 | 5450 | active |
| openkruise/kruise OpenKruise is a CNCF incubating suite of Kubernetes controllers and CRDs that extends core workload management with advanced capabilities l… | 98 | 5324 | active |
| gluster/glusterfs Gluster is a free and open-source software-defined distributed filesystem that aggregates storage from multiple servers into a single scala… | 67 | 5220 | stable |
| eksctl-io/eksctl eksctl is the official command-line tool for creating and managing Amazon EKS (Elastic Kubernetes Service) clusters, written in Go and buil… | 98 | 5213 | active |
| helmfile/helmfile Helmfile is a declarative CLI tool for deploying Kubernetes Helm charts, Kustomize configs, and raw manifests as Helm releases from version… | 99 | 5181 | active |
| tianshiyeben/wgcloud WGCLOUD is a lightweight, distributed IT operations monitoring platform built on SpringBoot with a Go-based agent, designed for fast deploy… | 92 | 5180 | active |
| harvester/harvester Harvester is an open-source hyperconverged infrastructure (HCI) solution built on Kubernetes that runs on bare metal servers, providing int… | 94 | 5140 | stable |
| vllm-project/aibrix AIBrix is an open-source, cloud-native framework from the vLLM project providing essential building blocks for scalable, cost-efficient Gen… | 83 | 5038 | active |
| diggerhq/digger Digger (now rebranded OpenTaco) is an open-source Infrastructure-as-Code orchestration tool that runs Terraform plan and apply directly ins… | 92 | 5031 | active |
| hashicorp/terraform-provider-azurerm The official Terraform provider plugin for Azure Resource Manager, enabling declarative management of Azure resources via HashiCorp Terrafo… | 95 | 4974 | active |
| gnmyt/Nexterm Nexterm is an open-source, self-hosted server management application providing SSH, VNC, and RDP remote access through a web interface. It … | 88 | 4966 | active |
| tfutils/tfenv tfenv is a Terraform version manager written in Bash, inspired by rbenv. It lets developers install, switch, pin, and list multiple Terrafo… | 89 | 4964 | active |
| cloudtools/troposphere A Python library for programmatically generating AWS CloudFormation templates as JSON or YAML. It provides typed classes for AWS resources … | 89 | 4945 | stable |
| cdk8s-team/cdk8s cdk8s is an open-source software development framework for defining Kubernetes applications and reusable abstractions using familiar progra… | 67 | 4851 | active |
| hashicorp/consul-template A daemon and CLI tool from HashiCorp that queries Consul, Vault, or Nomad and renders template files with the resulting data. It can also r… | 93 | 4824 | stable |
| canonical/lxd LXD is a system container and virtual machine manager that provides a unified, cloud-like experience for running full Linux systems in LXC … | 99 | 4816 | stable |
| terraform-docs/terraform-docs terraform-docs is a CLI utility that generates documentation from Terraform modules in various output formats such as Markdown, AsciiDoc, J… | 83 | 4814 | stable |
| greenbone/openvas-scanner OpenVAS Scanner is the scan engine of the Greenbone Community Edition, executing a continuously updated feed of vulnerability tests against… | 95 | 4796 | active |
| werf werf is a CNCF Sandbox CLI tool that implements full-cycle CI/CD for Kubernetes, integrating with your CI system to build, publish, test, a… | 94 | 4717 | stable |
| acassen/keepalived Keepalived is a routing daemon written in C that provides load balancing and high availability for Linux systems. It implements VRRP v2/v3 … | 76 | 4664 | stable |
| taikoxyz/taiko-mono Taiko Alethia is the monorepo for Taiko, the first type-1 (Ethereum-equivalent) based rollup protocol on Ethereum, where L1 validators sequ… | 96 | 4560 | active |
| virtual-kubelet/virtual-kubelet Virtual Kubelet is an open-source Kubernetes kubelet implementation that masquerades as a kubelet to connect Kubernetes clusters to other A… | 87 | 4560 | active |
| hestiacp/hestiacp Hestia Control Panel is an open-source, lightweight web hosting control panel for Linux servers that provides a web and CLI interface for m… | 99 | 4483 | active |
| cloudflare/workers-sdk The Cloudflare Workers SDK is a monorepo containing Wrangler, the official CLI for building, testing, and deploying Cloudflare Workers serv… | 95 | 4475 | active |
| PowerDNS/pdns PowerDNS is a suite of open-source DNS software written in C++, comprising the Authoritative Server, the Recursor, and dnsdist. It provides… | 77 | 4456 | stable |
| Project-HAMi/HAMi HAMi (Heterogeneous AI Computing Virtualization Middleware) is a CNCF Incubating, Kubernetes-native GPU virtualization and scheduling middl… | 95 | 4438 | active |
| kubernetes/ingress-nginx Ingress NGINX Controller is a Kubernetes ingress controller that uses NGINX as a reverse proxy and load balancer to route external traffic … | 10 | 19476 | maintenance |
| deuxfleurs-org/garage Garage is an S3-compatible distributed object storage service written in Rust, designed for self-hosting at small-to-medium scale. It repli… | 77 | 4414 | active |
| DPDK/dpdk DPDK is a set of C libraries and NIC drivers for fast userspace packet processing, bypassing the kernel network stack. It supports multiple… | 77 | 4394 | stable |
| autobase-tech/autobase Autobase is a self-hosted internal database platform for PostgreSQL that delivers a DBaaS-like experience on your own infrastructure. It pr… | 98 | 4347 | active |
| kubernetes-sigs/aws-load-balancer-controller A Kubernetes controller that manages AWS Elastic Load Balancers for a cluster. It provisions Application Load Balancers for Ingress resourc… | 98 | 4321 | stable |
| purpleidea/mgmt mgmt is a next-generation distributed, event-driven configuration management tool written in Go, with its own reactive language (mcl) for m… | 88 | 4308 | active |
| kubernetes-sigs/cluster-api Cluster API is a Kubernetes subproject providing declarative APIs and tooling for provisioning, upgrading, and operating multiple Kubernete… | 94 | 4288 | stable |
| SchedMD/slurm Slurm is an open-source, highly scalable cluster resource management and job scheduling system for Linux clusters. It allocates compute nod… | 98 | 4282 | stable |
| open-policy-agent/gatekeeper Gatekeeper is a CNCF policy controller for Kubernetes built on Open Policy Agent (OPA). It enforces admission policies via customizable con… | 97 | 4269 | stable |
| FRRouting/frr FRRouting (FRR) is a free, open-source IP routing protocol suite for Linux and Unix platforms, descended from Quagga. It implements and man… | 96 | 4268 | stable |
| riemann/riemann Riemann is a network event stream processing system written in Clojure that aggregates events from servers and applications. It provides a … | 57 | 4268 | stable |
| cloudius-systems/osv OSv is an open-source modular unikernel operating system designed to run single unmodified Linux applications securely as microVMs on top o… | 67 | 4263 | active |
| baidu/braft braft is an industrial-grade C++ implementation of the RAFT consensus algorithm and replicated state machine, built on top of brpc. It is d… | 23 | 4228 | stable |
| mlabouardy/komiser Komiser is an open-source, cloud-agnostic inspector that builds an inventory of cloud resources across AWS, GCP, Azure, DigitalOcean, and m… | 69 | 4138 | active |
| osrg/gobgp GoBGP is an open-source Border Gateway Protocol (BGP) implementation written in Go, usable both as a standalone BGP daemon with a CLI and a… | 94 | 4103 | active |
| opendevops-cn/opendevops CODO (opendevops) is an open-source, one-stop enterprise operations platform for managing multi-cloud and hybrid cloud environments with au… | 67 | 4101 | active |
| hashicorp/boundary HashiCorp Boundary is an identity-aware proxy that provides secure, least-privilege access to hosts and critical systems across clouds and … | 89 | 4056 | active |
| varnishcache/varnish-cache Varnish Cache is a high-performance open-source HTTP accelerator and reverse caching proxy written in C, serving cached responses from memo… | 10 | 4048 | active |
| cartography-cncf/cartography Cartography is a Python CLI tool that ingests infrastructure assets and their relationships from 30+ platforms (AWS, GCP, Azure, Kubernetes… | 98 | 4028 | active |
| postgresml/pgcat PgCat is a PostgreSQL connection pooler and proxy written in Rust, similar to PgBouncer, with support for sharding, load balancing, failove… | 38 | 4009 | stable |
| openvswitch/ovs Open vSwitch is a production-quality multilayer software switch designed for virtualized server environments, written primarily in C. It su… | 76 | 4007 | stable |
| kubernetes/kubeadm Kubeadm is a CLI tool that provides best-practice fast paths for creating Kubernetes clusters, bootstrapping control-plane and worker nodes… | 75 | 3997 | stable |
| Netflix/chaosmonkey Chaos Monkey is a chaos engineering tool from Netflix that randomly terminates virtual machine instances and containers in production to te… | 26 | 17091 | maintenance |
| projectcontour/contour Contour is a Kubernetes ingress controller that acts as the control plane for the Envoy proxy, deploying Envoy as a reverse proxy and load … | 98 | 3944 | active |
| DNSControl/dnscontrol DNSControl is an infrastructure-as-code tool for managing DNS zones and registrars via a JavaScript-compatible DSL. It pushes DNS records t… | 99 | 3917 | active |
| ansible/ansible-lint ansible-lint is a command-line linter that checks Ansible playbooks and roles for practices and behavior that could be improved, and can au… | 98 | 3901 | active |
| kube-rs/kube kube is a Rust client for Kubernetes, modeled after client-go, with an async controller runtime inspired by controller-runtime and derive m… | 92 | 3805 | stable |
| gofireflyio/aiac aiac is a command line tool and Go library that uses LLM providers such as OpenAI, Amazon Bedrock, and Ollama to generate Infrastructure-as… | 55 | 3786 | active |
| OffchainLabs/prysm Prysm is a Go implementation of the Ethereum Consensus (proof of stake) specification, developed by Offchain Labs. It runs beacon chain nod… | 98 | 3775 | active |
| aquasecurity/cloudsploit CloudSploit by Aqua is an open-source Cloud Security Posture Management (CSPM) tool that scans cloud infrastructure accounts for misconfigu… | 72 | 3768 | active |
| antonbabenko/pre-commit-terraform A collection of git hooks for Terraform, OpenTofu, and Terragrunt driven by the pre-commit framework. It automatically formats code and run… | 99 | 3760 | active |
| octodns/octodns octoDNS is a Python tool for managing DNS records as code across multiple DNS providers. It uses a pluggable architecture so DNS zone confi… | 76 | 3748 | stable |
| sozu-proxy/sozu Sōzu is a fast, always-up HTTP and TCP reverse proxy written in Rust that can be reconfigured at runtime without reloads and upgrades itsel… | 97 | 3722 | active |
| vitobotta/hetzner-k3s hetzner-k3s is a CLI tool written in Crystal that creates production-ready Kubernetes (k3s) clusters on Hetzner Cloud from a single YAML co… | 96 | 3667 | active |
| ansible/awx AWX is a web-based UI, REST API, and task engine built on top of Ansible, serving as the upstream project for Red Hat Ansible Automation Pl… | 67 | 15537 | maintenance |
| moby/swarmkit SwarmKit is a Go toolkit for orchestrating distributed systems, providing Raft-based consensus, node discovery, task scheduling, and servic… | 81 | 3647 | active |
| Azure/bicep Bicep is a declarative infrastructure-as-code language and toolchain for describing and deploying Azure resources, compiling down to ARM te… | 94 | 3634 | active |
| terramate-io/terramate Terramate is an open-source Infrastructure as Code orchestration and code generation platform written in Go, designed to help Terraform, Op… | 98 | 3621 | active |
| stackrox/kube-linter KubeLinter is a static analysis CLI tool that checks Kubernetes YAML files, Helm charts, and Kustomize manifests against security and produ… | 86 | 3501 | active |
| databus23/helm-diff A Helm plugin that previews what a `helm upgrade` would change by generating a diff between the deployed release and the newly rendered man… | 98 | 3484 | active |
| sourcegraph/checkup Checkup is a distributed, lock-free, self-hosted health check and status page tool written in Go, offering both a CLI and an idiomatic Go l… | 63 | 3458 | active |
| digitalocean/doctl doctl is the official command-line interface for the DigitalOcean API, written in Go. It lets users manage droplets, Kubernetes clusters, d… | 99 | 3451 | active |
| guohongze/adminset AdminSet is a self-hosted, fully automated IT operations (DevOps) platform built on Django, integrating CMDB asset management, automated co… | 39 | 3441 | active |
| gardener/gardener Gardener is a Kubernetes-native system for managing the full lifecycle of homogeneous Kubernetes clusters at scale across any cloud or infr… | 95 | 3432 | active |
| nix-community/nixos-anywhere nixos-anywhere is a CLI tool that installs NixOS on remote machines over SSH in a single unattended command. It handles disk partitioning v… | 80 | 3405 | active |
| FairwindsOps/polaris Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration against 30+ built-in best-pract… | 98 | 3384 | active |
| facebook/mcrouter Mcrouter is a memcached protocol router developed by Facebook for scaling memcached deployments, handling nearly 5 billion requests per sec… | 67 | 3334 | stable |
| FairwindsOps/goldilocks Goldilocks is a Kubernetes utility that helps identify a starting point for resource requests and limits by creating a Vertical Pod Autosca… | 95 | 3320 | active |
| im2nguyen/rover Rover is an interactive Terraform visualizer that parses Terraform plan files and configuration to generate a resource overview, map, and g… | 38 | 3318 | active |
| nix-community/disko disko is a declarative disk partitioning and formatting tool for NixOS that lets you define disks, partitions, filesystems, and mount point… | 83 | 3284 | active |
| open-policy-agent/conftest Conftest is a CLI utility for writing tests against structured configuration data using the Open Policy Agent Rego language. It validates f… | 98 | 3249 | active |
| iqiyi/dpvs DPVS is a high-performance Layer-4 load balancer built on DPDK, derived from LVS and running entirely in user space with kernel bypass. It … | 53 | 3242 | active |
| openstack/nova OpenStack Nova is the compute service of OpenStack, acting as a cloud computing fabric controller that provisions and manages virtual machi… | 77 | 3230 | active |
| vitodeploy/vito Vito is a free, self-hosted web application for managing servers and deploying PHP applications like Laravel to production. It provides a c… | 95 | 3217 | active |
| gruntwork-io/cloud-nuke cloud-nuke is a Go CLI tool that deletes all resources in a cloud account (primarily AWS, supporting 125+ resource types), designed for cle… | 93 | 3178 | active |
| yannh/kubeconform Kubeconform is a fast Kubernetes manifest validator written in Go, inspired by Kubeval. It validates YAML manifests against JSON schemas, s… | 78 | 3162 | active |
| geohot/minikeyvalue A ~1000 line distributed key-value store written in Go, using nginx as volume servers and LevelDB for indexing, with replication and rebala… | 32 | 3155 | stable |
| Mic92/sops-nix sops-nix is a NixOS module that provides atomic, declarative secret provisioning based on Mozilla's sops. It decrypts sops-encrypted files … | 67 | 3130 | active |
| zegl/kube-score kube-score is a static code analysis tool for Kubernetes object definitions that scores manifests and Helm charts against reliability and s… | 60 | 3102 | active |
| microsoft/service-fabric Service Fabric is a distributed systems platform for packaging, deploying, and managing stateless and stateful microservices and containers… | 76 | 3065 | active |
| kubernetes-sigs/nfs-subdir-external-provisioner A Kubernetes dynamic volume provisioner that automatically creates Persistent Volumes on an existing NFS server, placing each volume in a s… | 57 | 3039 | active |
| apache/cloudstack Apache CloudStack is an open-source Infrastructure as a Service (IaaS) platform for deploying and managing large networks of virtual machin… | 99 | 3031 | stable |
| kubernetes-sigs/kro kro (Kube Resource Orchestrator) is a Kubernetes-native controller that lets you define custom APIs composed of groups of Kubernetes resour… | 88 | 3004 | active |
| Barre/ZeroFS ZeroFS is a log-structured filesystem written in Rust that turns S3-compatible object storage (Amazon S3, GCS, Azure Blob, or any S3-compat… | 81 | 3003 | active |
| twitter/twemproxy Twemproxy (nutcracker) is a fast, lightweight proxy for the memcached and Redis protocols, written in C. It reduces backend connection coun… | 23 | 12337 | maintenance |
| nickel-lang/nickel Nickel is a configuration language that generates static configuration files like JSON, YAML, and XML, essentially 'JSON with functions'. I… | 91 | 2981 | active |
| kubernetes-sigs/gateway-api Kubernetes Gateway API is the official successor to Ingress, providing a role-oriented, expressive specification and CRDs for L4/L7 routing… | 93 | 2978 | stable |
| projen/projen projen is a CLI tool and library that synthesizes project configuration files (package.json, tsconfig.json, GitHub Workflows, linting, CI/C… | 95 | 2948 | active |
| Telmate/terraform-provider-proxmox A Terraform provider plugin for the Proxmox virtualization platform, written in Go. It exposes Terraform resources to provision and manage … | 95 | 2946 | active |
| kubernetes-sigs/controller-runtime A set of Go libraries for building Kubernetes controllers and operators, providing a manager, controller, builder, and client abstractions … | 94 | 2946 | active |