Open-source infrastructure-as-code software
668 open-source libraries, tools and applications tagged infrastructure-as-code, ranked by how closely infrastructure-as-code is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
668 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| twitter/twemproxy Twemproxy (nutcracker) is a fast, lightweight proxy for the memcached and Redis protocols, written in C. It reduces backend connection coun… | 23 | 12338 | maintenance |
| nickel-lang/nickel Nickel is a configuration language that generates static configuration files like JSON, YAML, and XML, essentially 'JSON with functions'. I… | 93 | 3002 | active |
| acepanel/panel AcePanel is a fully open-source, enterprise-grade server operation and maintenance management panel written in Go with a Vue 3 frontend. It… | 96 | 2991 | active |
| Sablier Sablier is an open-source scale-to-zero service that starts containers and workloads on demand and stops them automatically after inactivit… | 96 | 2988 | active |
| kube-vip/kube-vip kube-vip is a self-contained Go-based virtual IP and load-balancer for Kubernetes, providing high availability for the control plane and Lo… | 100 | 2982 | active |
| kubernetes-sigs/controller-runtime A set of Go libraries for building Kubernetes controllers and operators, providing a manager, controller, builder, and client abstractions … | 99 | 2979 | active |
| projen/projen projen is a CLI tool and library that synthesizes project configuration files (package.json, tsconfig.json, GitHub Workflows, linting, CI/C… | 96 | 2958 | active |
| Cloudpods Cloudpods is an open-source, Golang-based cloud-native unified multi/hybrid-cloud platform ('a cloud on clouds') that manages on-premise KV… | 77 | 2958 | active |
| Telmate/terraform-provider-proxmox A Terraform provider plugin for the Proxmox virtualization platform, written in Go. It exposes Terraform resources to provision and manage … | 91 | 2953 | active |
| microvm-nix/microvm.nix A Nix Flake for building and running lightweight NixOS MicroVMs on NixOS/Linux and macOS hosts using one of eight hypervisors such as QEMU,… | 75 | 2949 | active |
| Foreman Foreman is an open-source, self-hosted web application for complete lifecycle management of physical and virtual servers, covering provisio… | 76 | 2943 | stable |
| SONiC SONiC (Software for Open Networking in the Cloud) is a free, open-source network operating system based on Linux that runs on switches from… | 77 | 2942 | active |
| aws/agent-toolkit-for-aws An official AWS-supported toolkit providing MCP servers, skills, and plugins that give AI coding agents the tools, knowledge, and guardrail… | 60 | 2916 | stable |
| kubesphere/kubekey KubeKey (kk) is a lightweight task-flow execution tool written in Go for installing and managing Kubernetes clusters, supporting all-in-one… | 96 | 2867 | active |
| kcp-dev/kcp kcp is a horizontally scalable, Kubernetes-like control plane that provides many isolated 'workspaces', each acting as its own lightweight … | 99 | 2841 | active |
| project-zot/zot zot is a production-ready, vendor-neutral container image and artifact registry built purely on the OCI image format and OCI Distribution S… | 92 | 2802 | active |
| OpenStack Swift OpenStack Swift is a distributed object storage system that scales from a single machine to thousands of servers, optimized for multi-tenan… | 75 | 2802 | stable |
| cobbler/cobbler Cobbler is a Linux installation and provisioning server that automates network-based OS deployment via PXE, DHCP, TFTP, and templated kicks… | 97 | 2773 | active |
| Checkmarx/kics KICS (Keeping Infrastructure as Code Secure) is an open-source static analysis tool by Checkmarx that scans IaC files for security vulnerab… | 97 | 2717 | active |
| grafana/tanka Grafana Tanka is a CLI tool (tk) that uses the Jsonnet data templating language to write clean, reusable, and concise Kubernetes configurat… | 99 | 2690 | active |
| juju/juju Juju is Canonical's open-source orchestration engine for deploying, integrating, and managing the lifecycle of applications at any scale us… | 99 | 2680 | stable |
| Terraform Google Provider The official Terraform provider plugin for Google Cloud Platform, maintained by Google and HashiCorp. It lets Terraform provision and manag… | 95 | 2662 | active |
| aws-cloudformation/cfn-lint cfn-lint is a Python CLI tool that validates AWS CloudFormation templates (YAML/JSON) against resource provider schemas and best-practice c… | 96 | 2644 | active |
| AWS Controllers for Kubernetes (ACK) AWS Controllers for Kubernetes (ACK) is a collection of Kubernetes custom resource definitions and controllers that let you define and mana… | 76 | 2635 | active |
| Architect Architect is an open-source framework and CLI for building Functional Web Apps (FWAs) on AWS serverless infrastructure using concise declar… | 65 | 2624 | active |
| TrueNAS The middleware source code for TrueNAS, an open enterprise NAS storage platform built on OpenZFS that provides file, block, and object stor… | 77 | 2605 | active |
| FairwindsOps/pluto Pluto is a Go command-line utility from Fairwinds that detects deprecated and removed Kubernetes apiVersions in static manifests, Helm char… | 97 | 2589 | stable |
| kubereboot/kured Kured (KUbernetes REboot Daemon) is a Kubernetes daemonset that safely performs automatic node reboots when the underlying OS indicates one… | 90 | 2581 | stable |
| mitogen-hq/mitogen Mitogen is a Python library for writing distributed self-replicating programs that bootstrap copies of themselves on remote machines over S… | 98 | 2542 | active |
| cloudnativelabs/kube-router Kube-router is a turnkey Kubernetes networking solution that combines pod networking (CNI), an IPVS/LVS-based service proxy, NetworkPolicy … | 96 | 2508 | active |
| NAPALM NAPALM is a Python library that provides a unified API for interacting with network devices from multiple vendors, such as routers and swit… | 79 | 2505 | active |
| Qovery Platform Qovery Engine is the Rust orchestration runtime behind Qovery's Kubernetes control plane, turning API operations into reproducible infrastr… | 75 | 2465 | active |
| Amazon VPC CNI The AWS VPC CNI plugin is a Kubernetes networking plugin that assigns VPC IP addresses to pods using Elastic Network Interfaces on AWS. It … | 98 | 2457 | active |
| KCL KCL is a constraint-based record and functional configuration and policy language implemented in Rust, with this repo providing the languag… | 100 | 2432 | active |
| k3s Kine is an etcd shim that translates the etcd API into calls against SQLite, Postgres, MySQL/MariaDB, or NATS, letting Kubernetes use those… | 99 | 2419 | active |
| iann0036/former2 Former2 scans your existing AWS account resources and generates Infrastructure-as-Code outputs such as CloudFormation, Terraform, Troposphe… | 70 | 2415 | active |
| antonbabenko/terraform-skill An Agent Skills-compatible plugin that gives AI coding agents (Claude Code, Cursor, Copilot, Gemini CLI, etc.) best-practice knowledge for … | 69 | 2399 | active |
| cycloidio/terracognita TerraCognita is a Go CLI tool that reverse-engineers existing cloud infrastructure on AWS, GCP, Azure, and VMware vSphere into Terraform HC… | 37 | 2394 | active |
| Checkmk/checkmk Checkmk is a comprehensive IT infrastructure and application monitoring platform covering servers, networks, containers, and cloud environm… | 77 | 2391 | stable |
| Curve Curve is a cloud-native distributed storage system developed by NetEase and hosted as a CNCF sandbox project, supporting both block storage… | 23 | 2390 | active |
| nix-community/colmena Colmena is a simple, stateless NixOS deployment tool written in Rust, modeled after NixOps and morph. It wraps Nix commands like nix-instan… | 86 | 2353 | active |
| RKE2 RKE2 (RKE Government) is Rancher's fully conformant, next-generation Kubernetes distribution focused on security and compliance, particular… | 92 | 2352 | active |
| serokell/deploy-rs deploy-rs is a Rust-based CLI tool for deploying Nix flakes as multi-profile configurations to remote nodes. It supports deploying multiple… | 76 | 2341 | active |
| rsyslog Rsyslog is a high-performance open-source log ingestion and ETL engine written in C, originally a syslog daemon and now a modular pipeline … | 91 | 2336 | stable |
| tim-koehler/Helm-Intellisense A Visual Studio Code extension that provides IntelliSense for Helm templates by reading and evaluating the chart's values.yaml. It offers a… | 57 | 2313 | active |
| megaease/easeprobe EaseProbe is a lightweight, standalone health/status checking tool written in Go that probes services via HTTP, TCP, ping, shell, SSH, TLS,… | 64 | 2295 | active |
| poundifdef/smoothmq SmoothMQ is a drop-in replacement for Amazon SQS that runs as a single Go binary on any cloud or self-hosted environment. It works with any… | 15 | 2289 | active |
| bpg/terraform-provider-proxmox A Terraform and OpenTofu provider that enables declarative management of Proxmox Virtual Environment resources such as VMs, containers, sto… | 96 | 2274 | active |
| veops/cmdb Veops CMDB is a simple, lightweight, and highly customizable IT configuration management database (CMDB) for managing IT infrastructure and… | 85 | 2262 | active |
| Icinga 2 Icinga 2 is the core monitoring server of the Icinga stack, checking availability of network resources, sending outage notifications, and g… | 97 | 2240 | stable |
| Karpenter Karpenter is a Kubernetes node autoscaler that watches for unschedulable pods, provisions right-sized nodes to meet their scheduling constr… | 95 | 2233 | active |
| ovh/the-bastion The Bastion is a self-hosted SSH bastion/gateway that acts as the single entry point for operational teams to access infrastructure devices… | 84 | 2189 | stable |
| aws/amazon-ecs-agent The Amazon ECS Container Agent manages containers on EC2 instances on behalf of Amazon Elastic Container Service, handling task lifecycle, … | 98 | 2183 | active |
| kelseyhightower/confd confd is a lightweight Go CLI tool that keeps local application configuration files up to date by rendering templates with data from backen… | 23 | 8422 | maintenance |
| PVE-Tools/PVE-Tools-9 PVE Tools Pro is an interactive Bash-based one-stop administration toolbox for Proxmox VE 9.x hosts. It wraps high-frequency and error-pron… | 82 | 2157 | active |
| openstack/devstack DevStack is a set of shell scripts and utilities that quickly deploy a full OpenStack cloud from upstream git source trees on a clean Ubunt… | 75 | 2145 | active |
| Azure/AKS Azure Kubernetes Service (AKS) is Microsoft's managed Kubernetes offering on Azure. This repository serves as the public issue tracker and … | 99 | 2143 | active |
| okd-project/okd OKD is the community distribution of Kubernetes that powers Red Hat OpenShift, adding developer and operations tooling, a web console, moni… | 92 | 2127 | active |
| EKS Anywhere Amazon EKS Anywhere is an open-source tool for creating and operating Kubernetes clusters on your own infrastructure, built on Amazon EKS D… | 98 | 2100 | active |
| ctripcorp/x-pipe X-Pipe is Ctrip's Redis multi-datacenter replication management system built on Redis's master-slave replication protocol. It provides low-… | 67 | 2088 | active |
| iPXE iPXE is the leading open source network boot firmware, providing a full PXE implementation enhanced with features like booting from HTTP/HT… | 77 | 2083 | active |
| BOSH Cloud Foundry BOSH is an open-source tool chain for release engineering, deployment, and lifecycle management of large-scale distributed se… | 99 | 2079 | active |
| someengineering/fixinventory Fix Inventory is an open-source cloud asset inventory and security tool that collects metadata from cloud providers (AWS, GCP, Azure, Digit… | 52 | 2078 | active |
| hashicorp/envconsul Envconsul is a Go CLI tool that launches a subprocess with environment variables populated from HashiCorp Consul key-value data and Vault s… | 83 | 2073 | active |
| Kubefirst Kubefirst is a CLI that provisions instant GitOps-based Kubernetes platforms, integrating tools like Argo CD, Atlantis, Vault, and external… | 69 | 2061 | active |
| filecoin-project/venus Venus is a Go implementation of the Filecoin distributed storage network, providing a full node and a modular collection of services for ch… | 91 | 2056 | active |
| Kamaji Kamaji is a Kubernetes operator that manages hosted Kubernetes control planes, running control plane components as pods inside a management… | 95 | 2046 | active |
| jkroepke/helm-secrets helm-secrets is a Helm plugin that transparently encrypts and decrypts Helm value files using sops, allowing secrets to be safely stored in… | 99 | 2033 | active |
| Nitric Nitric is a multi-language framework for building cloud backends with infrastructure declared inline in application code. It provisions res… | 95 | 2016 | active |
| camptocamp/terraboard Terraboard is a self-hosted web dashboard for inspecting and querying Terraform state files stored in versioned S3 buckets (or Terraform Cl… | 58 | 2010 | active |
| MooseFS MooseFS is an open-source, POSIX-compliant, petabyte-scale network distributed file system written in C. It spreads data across commodity s… | 76 | 2003 | stable |
| apache/trafficserver Apache Traffic Server is a fast, scalable, and extensible HTTP/1.1 and HTTP/2 compliant caching proxy server written in C++. It powers majo… | 77 | 1995 | stable |
| anomalyco/ion SST (formerly under anomalyco/ion) is a framework for building full-stack apps on your own cloud infrastructure, with a CLI and infrastruct… | 10 | 1992 | active |
| veops/oneterm OneTerm is a lightweight, flexible enterprise bastion host (jump server) built on the 4A model: authentication, authorization, account, and… | 93 | 1985 | active |
| opencmit/pangee-cluster PangeeCluster is a self-hosted web application providing a graphical interface for offline installation, maintenance, and upgrading of high… | 60 | 1970 | active |
| twitter/pelikan Pelikan is Twitter's framework for building high-performance cache services, written in Rust with a legacy C codebase. It includes products… | 23 | 1957 | active |
| moul/sshportal sshportal is a transparent SSH bastion (jump host) server written in Go that manages users, hosts, and access control without requiring a t… | 66 | 1941 | active |
| kapicorp/kapitan Kapitan is a Python CLI tool for templated, inventory-driven configuration management that compiles Jsonnet, Jinja2, Kadet, Helm, Kustomize… | 94 | 1932 | active |
| Azure/aztfexport Azure Export for Terraform (aztfexport) is a CLI tool that imports existing Azure resources into Terraform state and generates the correspo… | 90 | 1916 | active |
| cisagov/cset CSET is a free desktop application from CISA and Idaho National Laboratory that guides organizations through step-by-step cybersecurity ass… | 88 | 1909 | active |
| Open-Falcon Falcon+ (Open-Falcon) is an open-source, enterprise-level monitoring system written in Go, composed of multiple modules for metric collecti… | 10 | 7231 | maintenance |
| kpt kpt is a package-centric CLI toolchain for authoring, customizing, validating, and deploying Kubernetes configuration as declarative data (… | 99 | 1901 | active |
| Yuan-lab-LLM/ClawManager ClawManager is a Kubernetes-native control plane for managing AI agent instances at cluster scale, providing governed AI access through an … | 81 | 1900 | active |
| valqore/valqore Valqore is a deterministic infrastructure governance engine that scans Kubernetes manifests, Terraform, Helm, and cloud resources against 1… | 77 | 1900 | active |
| dmacvicar/terraform-provider-libvirt A Terraform provider that provisions and manages virtualization resources (virtual machines, storage pools, volumes, and networks) on Linux… | 94 | 1896 | active |
| Test Kitchen Test Kitchen is a Ruby-based CLI tool for integration testing infrastructure code and configuration management (e.g., Chef cookbooks) on is… | 96 | 1891 | active |
| carvel-dev/ytt ytt is a command-line YAML templating and patching tool that operates on YAML structure rather than text, using annotations and a sandboxed… | 94 | 1885 | active |
| yonahd/kor Kor is a Go CLI tool that discovers unused (orphaned) Kubernetes resources such as ConfigMaps, Secrets, Services, Roles, PVCs, and many mor… | 93 | 1877 | active |
| retspen/webvirtcloud WebVirtCloud is a Django-based web interface for managing QEMU/KVM virtualization hosts via the libvirt API. It lets admins create, update,… | 66 | 1876 | active |
| tunasync tunasync is a mirror job management tool written in Go, used to schedule and monitor synchronization jobs for software mirrors. It uses a m… | 86 | 1870 | stable |
| aquasecurity/tfsec tfsec is a static analysis security scanner for Terraform code that detects misconfigurations across major cloud providers using hundreds o… | 60 | 7046 | maintenance |
| ZSvirt/zsvirt ZSvirt is an open-source IaaS virtualization platform that brings ZStack's enterprise ZSphere engine to the community, providing a control … | 56 | 1855 | active |
| RobustMQ RobustMQ is a next-generation message queue infrastructure written in Rust that supports multiple protocols (MQTT, Kafka, AMQP) with a sing… | 92 | 1843 | active |
| hetznercloud/cli hcloud is the official command-line interface for managing Hetzner Cloud resources such as servers, networks, and volumes. It is written in… | 99 | 1841 | stable |
| google/nomulus Nomulus is an open-source, scalable, cloud-based top-level domain (TLD) registry service written in Java and running on Google Kubernetes E… | 95 | 1813 | active |
| Timmoth/RackPeek RackPeek is a CLI tool and web UI for documenting and managing home lab and small-scale IT infrastructure. It tracks hardware, services, ne… | 81 | 1803 | stable |
| stakpak/agent Stakpak is an open-source Rust CLI and autonomous agent that runs on your machines 24/7 to keep applications running, handling tasks like a… | 71 | 1803 | active |
| nfs-ganesha/nfs-ganesha NFS-Ganesha is a user-mode NFS fileserver supporting NFSv3, v4, and v4.1, plus the 9p protocol, running on most UNIX/Linux systems. It can … | 96 | 1791 | active |
| towardsthecloud/cloudburn CloudBurn is an open-source AWS cost policy engine distributed as a CLI, SDK, and GitHub App. It runs deterministic cost rules against Terr… | 93 | 1789 | active |
| openelb/openelb OpenELB is an open-source load balancer implementation for exposing Kubernetes LoadBalancer-type Services in bare-metal, edge, and virtuali… | 30 | 1774 | active |