domain: infrastructure-as-code
663 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| operacle/checkcle CheckCle is a self-hosted, open-source monitoring platform for real-time uptime and infrastructure monitoring of servers, applications, and… | 65 | 2943 | active |
| kube-vip/kube-vip kube-vip is a self-contained Go-based virtual IP and load-balancer for Kubernetes, providing high availability for the control plane and Lo… | 98 | 2941 | active |
| yunionio/cloudpods Cloudpods is an open-source, Golang-based cloud-native unified multi/hybrid-cloud platform ('a cloud on clouds') that manages on-premise KV… | 77 | 2935 | active |
| acepanel/panel AcePanel is a fully open-source, enterprise-grade server operation and maintenance management panel written in Go with a Vue 3 frontend. It… | 94 | 2932 | active |
| sablierapp/sablier Sablier is an open-source scale-to-zero service that starts containers and workloads on demand and stops them automatically after inactivit… | 99 | 2929 | active |
| theforeman/foreman Foreman is an open-source, self-hosted web application for complete lifecycle management of physical and virtual servers, covering provisio… | 77 | 2907 | stable |
| microvm-nix/microvm.nix A Nix Flake for building and running lightweight NixOS MicroVMs on NixOS/Linux and macOS hosts using one of eight hypervisors such as QEMU,… | 77 | 2882 | active |
| kubesphere/kubekey KubeKey (kk) is a lightweight task-flow execution tool written in Go for installing and managing Kubernetes clusters, supporting all-in-one… | 95 | 2860 | active |
| kcp-dev/kcp kcp is a horizontally scalable, Kubernetes-like control plane that provides many isolated 'workspaces', each acting as its own lightweight … | 96 | 2816 | active |
| openstack/swift OpenStack Swift is a distributed object storage system that scales from a single machine to thousands of servers, optimized for multi-tenan… | 77 | 2794 | stable |
| cobbler/cobbler Cobbler is a Linux installation and provisioning server that automates network-based OS deployment via PXE, DHCP, TFTP, and templated kicks… | 79 | 2768 | active |
| Checkmarx/kics KICS (Keeping Infrastructure as Code Secure) is an open-source static analysis tool by Checkmarx that scans IaC files for security vulnerab… | 98 | 2695 | active |
| grafana/tanka Grafana Tanka is a CLI tool (tk) that uses the Jsonnet data templating language to write clean, reusable, and concise Kubernetes configurat… | 97 | 2682 | active |
| nuver-labs/vps-audit A dependency-free Bash script that audits Linux VPS security and performance, running 18 graded checks covering SSH configuration, firewall… | 86 | 2676 | active |
| project-zot/zot zot is a production-ready, vendor-neutral container image and artifact registry built purely on the OCI image format and OCI Distribution S… | 94 | 2660 | active |
| juju/juju Juju is Canonical's open-source orchestration engine for deploying, integrating, and managing the lifecycle of applications at any scale us… | 99 | 2658 | stable |
| hashicorp/terraform-provider-google The official Terraform provider plugin for Google Cloud Platform, maintained by Google and HashiCorp. It lets Terraform provision and manag… | 95 | 2642 | active |
| aws-cloudformation/cfn-lint cfn-lint is a Python CLI tool that validates AWS CloudFormation templates (YAML/JSON) against resource provider schemas and best-practice c… | 94 | 2640 | active |
| aws-controllers-k8s/community AWS Controllers for Kubernetes (ACK) is a collection of Kubernetes custom resource definitions and controllers that let you define and mana… | 77 | 2632 | active |
| architect/architect Architect is an open-source framework and CLI for building Functional Web Apps (FWAs) on AWS serverless infrastructure using concise declar… | 67 | 2622 | active |
| truenas/middleware The middleware source code for TrueNAS, an open enterprise NAS storage platform built on OpenZFS that provides file, block, and object stor… | 77 | 2587 | active |
| FairwindsOps/pluto Pluto is a Go command-line utility from Fairwinds that detects deprecated and removed Kubernetes apiVersions in static manifests, Helm char… | 98 | 2570 | stable |
| kubereboot/kured Kured (KUbernetes REboot Daemon) is a Kubernetes daemonset that safely performs automatic node reboots when the underlying OS indicates one… | 92 | 2567 | stable |
| mitogen-hq/mitogen Mitogen is a Python library for writing distributed self-replicating programs that bootstrap copies of themselves on remote machines over S… | 99 | 2528 | active |
| cloudnativelabs/kube-router Kube-router is a turnkey Kubernetes networking solution that combines pod networking (CNI), an IPVS/LVS-based service proxy, NetworkPolicy … | 99 | 2497 | active |
| napalm-automation/napalm NAPALM is a Python library that provides a unified API for interacting with network devices from multiple vendors, such as routers and swit… | 86 | 2492 | active |
| Qovery/engine Qovery Engine is the Rust orchestration runtime behind Qovery's Kubernetes control plane, turning API operations into reproducible infrastr… | 77 | 2458 | active |
| aws/amazon-vpc-cni-k8s The AWS VPC CNI plugin is a Kubernetes networking plugin that assigns VPC IP addresses to pods using Elastic Network Interfaces on AWS. It … | 98 | 2453 | active |
| aws/agent-toolkit-for-aws An official AWS-supported toolkit providing MCP servers, skills, and plugins that give AI coding agents the tools, knowledge, and guardrail… | 59 | 2436 | stable |
| iann0036/former2 Former2 scans your existing AWS account resources and generates Infrastructure-as-Code outputs such as CloudFormation, Terraform, Troposphe… | 73 | 2411 | active |
| kcl-lang/kcl KCL is a constraint-based record and functional configuration and policy language implemented in Rust, with this repo providing the languag… | 79 | 2403 | active |
| k3s-io/kine Kine is an etcd shim that translates the etcd API into calls against SQLite, Postgres, MySQL/MariaDB, or NATS, letting Kubernetes use those… | 99 | 2396 | active |
| opencurve/curve Curve is a cloud-native distributed storage system developed by NetEase and hosted as a CNCF sandbox project, supporting both block storage… | 23 | 2387 | active |
| cycloidio/terracognita TerraCognita is a Go CLI tool that reverse-engineers existing cloud infrastructure on AWS, GCP, Azure, and VMware vSphere into Terraform HC… | 41 | 2385 | active |
| Checkmk/checkmk Checkmk is a comprehensive IT infrastructure and application monitoring platform covering servers, networks, containers, and cloud environm… | 77 | 2349 | stable |
| rsyslog/rsyslog Rsyslog is a high-performance open-source log ingestion and ETL engine written in C, originally a syslog daemon and now a modular pipeline … | 95 | 2329 | stable |
| nix-community/colmena Colmena is a simple, stateless NixOS deployment tool written in Rust, modeled after NixOps and morph. It wraps Nix commands like nix-instan… | 67 | 2326 | active |
| rancher/rke2 RKE2 (RKE Government) is Rancher's fully conformant, next-generation Kubernetes distribution focused on security and compliance, particular… | 94 | 2325 | active |
| antonbabenko/terraform-skill An Agent Skills-compatible plugin that gives AI coding agents (Claude Code, Cursor, Copilot, Gemini CLI, etc.) best-practice knowledge for … | 74 | 2305 | active |
| tim-koehler/Helm-Intellisense A Visual Studio Code extension that provides IntelliSense for Helm templates by reading and evaluating the chart's values.yaml. It offers a… | 61 | 2304 | active |
| megaease/easeprobe EaseProbe is a lightweight, standalone health/status checking tool written in Go that probes services via HTTP, TCP, ping, shell, SSH, TLS,… | 66 | 2296 | active |
| poundifdef/smoothmq SmoothMQ is a drop-in replacement for Amazon SQS that runs as a single Go binary on any cloud or self-hosted environment. It works with any… | 18 | 2286 | active |
| serokell/deploy-rs deploy-rs is a Rust-based CLI tool for deploying Nix flakes as multi-profile configurations to remote nodes. It supports deploying multiple… | 77 | 2285 | active |
| veops/cmdb Veops CMDB is a simple, lightweight, and highly customizable IT configuration management database (CMDB) for managing IT infrastructure and… | 91 | 2238 | active |
| Icinga/icinga2 Icinga 2 is the core monitoring server of the Icinga stack, checking availability of network resources, sending outage notifications, and g… | 99 | 2233 | stable |
| bpg/terraform-provider-proxmox A Terraform and OpenTofu provider that enables declarative management of Proxmox Virtual Environment resources such as VMs, containers, sto… | 92 | 2199 | active |
| aws/amazon-ecs-agent The Amazon ECS Container Agent manages containers on EC2 instances on behalf of Amazon Elastic Container Service, handling task lifecycle, … | 99 | 2178 | active |
| ovh/the-bastion The Bastion is a self-hosted SSH bastion/gateway that acts as the single entry point for operational teams to access infrastructure devices… | 90 | 2177 | stable |
| kelseyhightower/confd confd is a lightweight Go CLI tool that keeps local application configuration files up to date by rendering templates with data from backen… | 23 | 8428 | maintenance |
| openstack/devstack DevStack is a set of shell scripts and utilities that quickly deploy a full OpenStack cloud from upstream git source trees on a clean Ubunt… | 75 | 2143 | active |
| Azure/AKS Azure Kubernetes Service (AKS) is Microsoft's managed Kubernetes offering on Azure. This repository serves as the public issue tracker and … | 98 | 2137 | active |
| kubernetes-sigs/karpenter Karpenter is a Kubernetes node autoscaler that watches for unschedulable pods, provisions right-sized nodes to meet their scheduling constr… | 95 | 2126 | active |
| okd-project/okd OKD is the community distribution of Kubernetes that powers Red Hat OpenShift, adding developer and operations tooling, a web console, moni… | 94 | 2110 | active |
| aws/eks-anywhere Amazon EKS Anywhere is an open-source tool for creating and operating Kubernetes clusters on your own infrastructure, built on Amazon EKS D… | 98 | 2097 | active |
| ctripcorp/x-pipe X-Pipe is Ctrip's Redis multi-datacenter replication management system built on Redis's master-slave replication protocol. It provides low-… | 67 | 2091 | active |
| PVE-Tools/PVE-Tools-9 PVE Tools Pro is an interactive Bash-based one-stop administration toolbox for Proxmox VE 9.x hosts. It wraps high-frequency and error-pron… | 84 | 2088 | active |
| cloudfoundry/bosh Cloud Foundry BOSH is an open-source tool chain for release engineering, deployment, and lifecycle management of large-scale distributed se… | 99 | 2077 | active |
| someengineering/fixinventory Fix Inventory is an open-source cloud asset inventory and security tool that collects metadata from cloud providers (AWS, GCP, Azure, Digit… | 56 | 2074 | active |
| hashicorp/envconsul Envconsul is a Go CLI tool that launches a subprocess with environment variables populated from HashiCorp Consul key-value data and Vault s… | 82 | 2071 | active |
| konstructio/kubefirst Kubefirst is a CLI that provisions instant GitOps-based Kubernetes platforms, integrating tools like Argo CD, Atlantis, Vault, and external… | 75 | 2057 | active |
| filecoin-project/venus Venus is a Go implementation of the Filecoin distributed storage network, providing a full node and a modular collection of services for ch… | 84 | 2054 | active |
| ipxe/ipxe iPXE is the leading open source network boot firmware, providing a full PXE implementation enhanced with features like booting from HTTP/HT… | 79 | 2040 | active |
| jkroepke/helm-secrets helm-secrets is a Helm plugin that transparently encrypts and decrypts Helm value files using sops, allowing secrets to be safely stored in… | 95 | 2025 | active |
| nitrictech/nitric Nitric is a multi-language framework for building cloud backends with infrastructure declared inline in application code. It provisions res… | 69 | 2014 | active |
| clastix/kamaji Kamaji is a Kubernetes operator that manages hosted Kubernetes control planes, running control plane components as pods inside a management… | 95 | 2013 | active |
| camptocamp/terraboard Terraboard is a self-hosted web dashboard for inspecting and querying Terraform state files stored in versioned S3 buckets (or Terraform Cl… | 62 | 2008 | active |
| moosefs/moosefs MooseFS is an open-source, POSIX-compliant, petabyte-scale network distributed file system written in C. It spreads data across commodity s… | 83 | 1999 | stable |
| anomalyco/ion SST (formerly under anomalyco/ion) is a framework for building full-stack apps on your own cloud infrastructure, with a CLI and infrastruct… | 10 | 1995 | active |
| apache/trafficserver Apache Traffic Server is a fast, scalable, and extensible HTTP/1.1 and HTTP/2 compliant caching proxy server written in C++. It powers majo… | 77 | 1977 | stable |
| opencmit/pangee-cluster PangeeCluster is a self-hosted web application providing a graphical interface for offline installation, maintenance, and upgrading of high… | 67 | 1971 | active |
| twitter/pelikan Pelikan is Twitter's framework for building high-performance cache services, written in Rust with a legacy C codebase. It includes products… | 23 | 1957 | active |
| moul/sshportal sshportal is a transparent SSH bastion (jump host) server written in Go that manages users, hosts, and access control without requiring a t… | 67 | 1940 | active |
| kapicorp/kapitan Kapitan is a Python CLI tool for templated, inventory-driven configuration management that compiles Jsonnet, Jinja2, Kadet, Helm, Kustomize… | 95 | 1925 | active |
| Azure/aztfexport Azure Export for Terraform (aztfexport) is a CLI tool that imports existing Azure resources into Terraform state and generates the correspo… | 93 | 1909 | active |
| open-falcon/falcon-plus Falcon+ (Open-Falcon) is an open-source, enterprise-level monitoring system written in Go, composed of multiple modules for metric collecti… | 10 | 7234 | maintenance |
| Yuan-lab-LLM/ClawManager ClawManager is a Kubernetes-native control plane for managing AI agent instances at cluster scale, providing governed AI access through an … | 81 | 1899 | active |
| test-kitchen/test-kitchen Test Kitchen is a Ruby-based CLI tool for integration testing infrastructure code and configuration management (e.g., Chef cookbooks) on is… | 99 | 1892 | active |
| kptdev/kpt kpt is a package-centric CLI toolchain for authoring, customizing, validating, and deploying Kubernetes configuration as declarative data (… | 98 | 1890 | active |
| cisagov/cset CSET is a free desktop application from CISA and Idaho National Laboratory that guides organizations through step-by-step cybersecurity ass… | 69 | 1887 | active |
| retspen/webvirtcloud WebVirtCloud is a Django-based web interface for managing QEMU/KVM virtualization hosts via the libvirt API. It lets admins create, update,… | 58 | 1875 | active |
| carvel-dev/ytt ytt is a command-line YAML templating and patching tool that operates on YAML structure rather than text, using annotations and a sandboxed… | 95 | 1874 | active |
| dmacvicar/terraform-provider-libvirt A Terraform provider that provisions and manages virtualization resources (virtual machines, storage pools, volumes, and networks) on Linux… | 92 | 1873 | active |
| aquasecurity/tfsec tfsec is a static analysis security scanner for Terraform code that detects misconfigurations across major cloud providers using hundreds o… | 59 | 7035 | maintenance |
| tuna/tunasync tunasync is a mirror job management tool written in Go, used to schedule and monitor synchronization jobs for software mirrors. It uses a m… | 92 | 1860 | stable |
| valqore/valqore Valqore is a deterministic infrastructure governance engine that scans Kubernetes manifests, Terraform, Helm, and cloud resources against 1… | 81 | 1831 | active |
| yonahd/kor Kor is a Go CLI tool that discovers unused (orphaned) Kubernetes resources such as ConfigMaps, Secrets, Services, Roles, PVCs, and many mor… | 87 | 1814 | active |
| google/nomulus Nomulus is an open-source, scalable, cloud-based top-level domain (TLD) registry service written in Java and running on Google Kubernetes E… | 95 | 1806 | active |
| robustmq/robustmq RobustMQ is a next-generation message queue infrastructure written in Rust that supports multiple protocols (MQTT, Kafka, AMQP) with a sing… | 93 | 1787 | active |
| hetznercloud/cli hcloud is the official command-line interface for managing Hetzner Cloud resources such as servers, networks, and volumes. It is written in… | 97 | 1784 | stable |
| nfs-ganesha/nfs-ganesha NFS-Ganesha is a user-mode NFS fileserver supporting NFSv3, v4, and v4.1, plus the 9p protocol, running on most UNIX/Linux systems. It can … | 99 | 1780 | active |
| towardsthecloud/cloudburn CloudBurn is an open-source AWS cost policy engine distributed as a CLI, SDK, and GitHub App. It runs deterministic cost rules against Terr… | 96 | 1777 | active |
| openelb/openelb OpenELB is an open-source load balancer implementation for exposing Kubernetes LoadBalancer-type Services in bare-metal, edge, and virtuali… | 33 | 1774 | active |
| aws/aws-node-termination-handler AWS Node Termination Handler is a Kubernetes daemon/controller that watches for EC2 instance shutdown events such as Spot interruptions, ma… | 85 | 1762 | active |
| stakpak/agent Stakpak is an open-source Rust CLI and autonomous agent that runs on your machines 24/7 to keep applications running, handling tasks like a… | 76 | 1756 | active |
| OpenNebula/one OpenNebula is an open-source cloud management platform for building and operating private clouds, edge infrastructures, distributed deploym… | 76 | 1736 | stable |
| awslabs/aws-config-rules A community repository of sample custom AWS Config rules written in Python, Node.js, and Java. These Lambda-based rules evaluate AWS resour… | 70 | 1735 | active |
| veops/oneterm OneTerm is a lightweight, flexible enterprise bastion host (jump server) built on the 4A model: authentication, authorization, account, and… | 59 | 1732 | active |
| Yelp/paasta PaaSTA is an open-source, distributed platform-as-a-service from Yelp for building, deploying, and monitoring containerized services on Kub… | 95 | 1729 | stable |
| envoyproxy/go-control-plane A Go library implementing the Envoy xDS discovery service APIs (data-plane-api) as a gRPC API server with an in-memory configuration cache.… | 99 | 1725 | active |
| rancher/fleet Fleet is a GitOps and HelmOps deployment engine for Kubernetes, built as CRDs and controllers that deploy workloads from Git repositories (… | 95 | 1724 | active |