Open-source infrastructure-as-code software
668 open-source libraries, tools and applications tagged infrastructure-as-code, ranked by how closely infrastructure-as-code is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
668 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| aws/aws-node-termination-handler AWS Node Termination Handler is a Kubernetes daemon/controller that watches for EC2 instance shutdown events such as Spot interruptions, ma… | 79 | 1763 | active |
| OpenNebula/one OpenNebula is an open-source cloud management platform for building and operating private clouds, edge infrastructures, distributed deploym… | 75 | 1748 | stable |
| AWS Config Rules Development Kit (RDK) A community repository of sample custom AWS Config rules written in Python, Node.js, and Java. These Lambda-based rules evaluate AWS resour… | 76 | 1739 | active |
| libvirt/libvirt Libvirt is a portable, long-term stable C API and toolkit for managing virtualization technologies across many operating systems and hyperv… | 77 | 1738 | stable |
| envoyproxy/go-control-plane A Go library implementing the Envoy xDS discovery service APIs (data-plane-api) as a gRPC API server with an in-memory configuration cache.… | 100 | 1735 | active |
| Yelp/paasta PaaSTA is an open-source, distributed platform-as-a-service from Yelp for building, deploying, and monitoring containerized services on Kub… | 94 | 1734 | stable |
| Fleet Fleet is a GitOps and HelmOps deployment engine for Kubernetes, built as CRDs and controllers that deploy workloads from Git repositories (… | 92 | 1730 | active |
| Terraform Kubernetes Provider The official Terraform provider plugin for Kubernetes, maintained by HashiCorp, enabling full lifecycle management of Kubernetes resources … | 95 | 1722 | active |
| flux-iac/tofu-controller Tofu Controller is a Kubernetes controller that reconciles OpenTofu and Terraform resources through Flux in a GitOps workflow. It supports … | 92 | 1714 | active |
| 0xchasercat/flint Flint is a lightweight, self-contained KVM virtual machine management tool shipped as a single <11MB binary with a modern Web UI, CLI, and … | 55 | 1703 | active |
| OSTree libostree (formerly OSTree) is a shared library and suite of command line tools that combines a git-like model for committing and downloadi… | 90 | 1689 | stable |
| TritonDataCenter/smartos-live smartos-live is the root repository for building SmartOS, a live-image illumos-based operating system from the Triton DataCenter project. I… | 75 | 1685 | active |
| FOGProject/fogproject FOG is a free open-source computer cloning, imaging, and management system that deploys and manages Windows, macOS, and Linux machines over… | 99 | 1678 | active |
| FairwindsOps/rbac-manager RBAC Manager is a Kubernetes operator that simplifies authorization management by allowing declarative configuration of Role Bindings and S… | 92 | 1670 | active |
| Radius Radius is an open-source, cloud-native application platform that lets developers model an entire application—its services and the infrastru… | 99 | 1668 | active |
| spotahome/redis-operator A Kubernetes operator written in Go that creates, configures, and manages highly available Redis deployments with Sentinel-based automatic … | 10 | 1667 | active |
| Alchemy Alchemy is a TypeScript-native Infrastructure-as-Code library for defining cloud resources (e.g., Cloudflare Workers, R2 buckets, Durable O… | 80 | 1660 | active |
| AltraMayor/gatekeeper Gatekeeper is the first open-source DDoS protection system, built on DPDK for high-performance packet processing. It uses a geographically … | 66 | 1649 | active |
| hashicorp/serf Serf is a decentralized service discovery and orchestration tool from HashiCorp that uses an efficient gossip protocol to manage cluster me… | 87 | 6075 | maintenance |
| facebookincubator/submitit Submitit is a lightweight Python library for submitting Python functions as jobs to a Slurm cluster, wrapping submission and providing acce… | 47 | 1642 | active |
| patrickchugh/terravision TerraVision is a Python CLI tool that automatically generates professional cloud architecture diagrams from Terraform code using official A… | 90 | 1636 | active |
| Kodiqa-Solutions/VaultS3 VaultS3 is a lightweight, S3-compatible object storage server written in Go, shipped as a single binary with a built-in web dashboard, encr… | 79 | 1634 | active |
| Nornir Nornir is a pure Python automation framework for operating collections of network devices, providing pluggable inventory management and mul… | 83 | 1624 | active |
| TraceMachina/nativelink NativeLink is a high-performance remote build cache and remote execution server written in Rust, speaking the open Remote Execution API. It… | 100 | 1621 | active |
| NethermindEth/nethermind Nethermind is a high-performance Ethereum execution client built on .NET, in production since 2017. It offers fast snap sync, high-throughp… | 100 | 1619 | stable |
| xcp-ng/xcp XCP-ng is a turnkey, fully open-source virtualization platform based on the Xen hypervisor, serving as the community-driven successor to Ci… | 73 | 1613 | stable |
| Flux159/mcp-server-kubernetes An MCP server written in TypeScript that lets AI assistants like Claude and Codex connect to and manage Kubernetes clusters via kubectl and… | 83 | 1596 | active |
| hashicorp/setup-terraform A GitHub Actions JavaScript action that installs a specified version of the Terraform CLI onto the workflow runner and adds it to PATH. It … | 87 | 1594 | active |
| PegaProx/project-pegaprox PegaProx is a self-hosted, open-source web dashboard for managing multiple Proxmox VE and XCP-ng clusters from a single interface. It provi… | 81 | 1591 | active |
| FDio/vpp FD.io's Vector Packet Processing (VPP) is an extensible, high-performance packet-processing framework providing production-quality switch a… | 77 | 1587 | stable |
| awslabs/diagram-as-code A Go-based CLI tool (awsdac) that generates AWS architecture diagrams from human-readable YAML definitions, following AWS diagram guideline… | 85 | 1585 | active |
| nccgroup/PMapper Principal Mapper (PMapper) is a Python CLI tool and library that models AWS IAM users and roles as a directed graph to identify privilege e… | 23 | 1580 | active |
| Ceph CSI Ceph CSI is the Container Storage Interface (CSI) driver for Ceph, providing plugins for RBD and CephFS backed volumes. It enables containe… | 95 | 1578 | stable |
| pyrra-dev/pyrra Pyrra is an open-source tool for defining, managing, and visualizing Service Level Objectives (SLOs) with Prometheus. It generates Promethe… | 94 | 1561 | active |
| ThisSeanZhang/landscape Landscape is a Linux router application built in Rust with eBPF that routes traffic by domain rather than just IP. It uses a userspace DNS … | 87 | 1561 | active |
| openstack/openstack-ansible OpenStack-Ansible is an official OpenStack project providing Ansible playbooks and roles for deploying production OpenStack clouds from sou… | 77 | 1561 | active |
| openshift/installer The official installer CLI for provisioning OpenShift 4.x Kubernetes clusters across many platforms including AWS, Azure, GCP, bare metal, … | 68 | 1559 | active |
| google/seesaw Seesaw v2 is a Linux Virtual Server (LVS) based load balancing platform written in Go. It supports advanced features like anycast, Direct S… | 70 | 5675 | maintenance |
| hashicorp/terraform-mcp-server An official Model Context Protocol (MCP) server from HashiCorp that integrates with the Terraform Registry and HCP Terraform APIs. It enabl… | 85 | 1550 | active |
| calamares/calamares Calamares is a distribution-independent system installer framework for Linux, featuring advanced manual and automated partitioning. It is h… | 10 | 1534 | active |
| Sceptre/sceptre Sceptre is a Python CLI tool that drives AWS CloudFormation, automating stack creation, dependency resolution, and multi-account/region dep… | 74 | 1532 | active |
| kubermatic/kubeone KubeOne is an open-source CLI tool by Kubermatic that automates the full lifecycle of Kubernetes clusters—provisioning, upgrading, repairin… | 99 | 1527 | active |
| liquidmetal-dev/flintlock Flintlock is a Go service for creating and managing the lifecycle of microVMs on a host machine, backed by containerd and supporting Firecr… | 99 | 1518 | active |
| awslabs/aws-support-tools A curated collection of diagnostic and troubleshooting scripts and sample code for AWS services, maintained by AWS Premium Support. Tools a… | 92 | 1510 | active |
| chihaya/chihaya Chihaya is a customizable, high-performance BitTorrent tracker written in Go that supports both HTTP and UDP announce protocols with IPv4 a… | 64 | 1509 | active |
| pluralsh/plural Plural is an enterprise Kubernetes management platform that provides fleet-scale GitOps deployments, infrastructure-as-code management, and… | 93 | 1506 | active |
| hercules-ci/flake-parts flake-parts is a Nix library that lets you write Nix Flakes using the NixOS module system, providing options that mirror the standard flake… | 76 | 1496 | stable |
| org-formation/org-formation-cli AWS Organization Formation is an Infrastructure as Code CLI tool for managing AWS Organizations, letting you define accounts, OUs, and serv… | 48 | 1490 | active |
| warrensbox/terraform-switcher Terraform Switcher (tfswitch) is a command-line tool for switching between different versions of Terraform, downloading and installing the … | 98 | 1488 | active |
| Time-Appliances-Project/Time-Card Time Card is an open-source PCIe card design (with schematics, BOM, Gerbers, firmware, and Linux driver code) that serves as a precision ti… | 76 | 1485 | active |
| openstack/neutron Neutron is OpenStack's Networking service, providing 'network connectivity as a service' for interface devices (vNICs) managed by other Ope… | 77 | 1471 | active |
| infrahq/infra Infra is an open-source authentication and access management service for servers, Kubernetes clusters, and databases. It provides identity-… | 68 | 1468 | active |
| nixopus/nixopus Nixopus is an open-source deployment platform with an autonomous AI agent that deploys, monitors, and heals applications. It can be self-ho… | 80 | 1467 | active |
| terraform-compliance/cli terraform-compliance is a lightweight, security-focused BDD test framework for Terraform that enables negative testing of infrastructure-as… | 84 | 1463 | active |
| cloudflare/serverless-registry A self-hostable OCI container registry implemented as a Cloudflare Worker, storing image layers and manifests in Cloudflare R2 object stora… | 70 | 1463 | active |
| abh/geodns GeoDNS is an authoritative DNS server written in Go that returns per-client targeted responses based on the geographic location of the requ… | 50 | 1460 | stable |
| OpenClarity OpenClarity is an open-source platform for agentless detection and management of Virtual Machine SBOMs and security threats such as vulnera… | 10 | 1459 | active |
| clusternet/clusternet Clusternet is a CNCF Sandbox open-source add-on for managing large fleets of Kubernetes clusters across public, private, hybrid, and edge e… | 92 | 1455 | active |
| Paritok-official/paritok-4b-v1 Paritok is a non-destructive compression gateway that sits as a drop-in proxy between AI coding agents (Claude Code, Cursor, Codex, OpenHan… | 56 | 1454 | active |
| flashbots/mev-boost MEV-Boost is open-source middleware (a sidecar) for Ethereum proof-of-stake validators that connects consensus clients to a competitive mar… | 75 | 1449 | active |
| tofuutils/tenv tenv is a version manager written in Go for OpenTofu, Terraform, Terragrunt, Terramate, and Atmos. It detects required versions from HCL fi… | 88 | 1443 | active |
| swoodford/aws A collection of bash shell scripts for automating AWS tasks using the AWS CLI and jq. It simplifies repetitive DevOps operations across ser… | 57 | 1442 | active |
| lamw/ghettoVCB ghettoVCB is a shell script that backs up virtual machines on VMware ESX/ESXi hosts by snapshotting live VMs, copying their VMDK disks, and… | 44 | 1430 | active |
| poseidon/matchbox Matchbox is a Go service that matches bare-metal machines to provisioning profiles via PXE/iPXE network boot, serving kernel, initrd, iPXE,… | 66 | 1428 | active |
| cloudflare/cf-terraforming A command line utility that fetches existing Cloudflare resources via the Cloudflare API and generates Terraform HCL configurations for the… | 92 | 1408 | active |
| cloudposse/atmos Atmos is an open-source CLI runtime for infrastructure that orchestrates Terraform, OpenTofu, Kubernetes, Helm, and containers through decl… | 96 | 1405 | active |
| ManageIQ ManageIQ is an open-source hybrid IT management platform for discovering, monitoring, controlling, and automating virtual machines, contain… | 77 | 1403 | active |
| zstackio/zstack ZStack is an open-source IaaS (Infrastructure as a Service) platform for automating datacenters, managing compute, storage, and networking … | 76 | 1399 | active |
| xrplevm/node The XRPL EVM Sidechain node is a Go implementation of a blockchain node that brings Ethereum Virtual Machine compatibility to the XRP Ledge… | 94 | 1398 | active |
| sous-chefs/docker A Chef cookbook providing resources for installing the Docker engine and managing Docker images and containers as Chef resources. It is mai… | 94 | 1396 | active |
| grafana/grafana-operator A Kubernetes operator that installs and manages Grafana instances, dashboards, datasources, and other Grafana resources via custom resource… | 97 | 1390 | active |
| vicanso/pingap Pingap is a high-performance reverse proxy and application gateway built in Rust on Cloudflare's Pingora library, offering nginx-like funct… | 92 | 1390 | active |
| siderolabs/omni Omni is a Kubernetes management platform by Sidero Labs that provides SaaS-simple deployment and operation of Kubernetes clusters on your o… | 86 | 1389 | active |
| aws-cloudformation/cloudformation-guard AWS CloudFormation Guard (cfn-guard) is a general-purpose policy-as-code evaluation tool with an expressive DSL for defining rules. It vali… | 83 | 1389 | active |
| ixrjog/opscloud4 OpsCloud4 is a self-hosted cloud operations platform built with Spring Boot that provides a bastion host with web/SSH terminals, Kubernetes… | 55 | 1388 | active |
| awless awless is a powerful CLI for managing Amazon Web Services with a small, hierarchical command surface. It offers a templating language for c… | 23 | 4953 | maintenance |
| senthilrch/kube-fledged kube-fledged is a Kubernetes operator that creates and manages a cache of container images directly on cluster worker nodes. By pre-pulling… | 82 | 1374 | active |
| pipe-cd/pipecd PipeCD is a GitOps-style continuous delivery platform that provides a unified deployment and operations experience for applications across … | 96 | 1358 | active |
| awslabs/aws-solutions-constructs AWS Solutions Constructs is an open-source extension of the AWS CDK that provides multi-service, well-architected patterns for defining clo… | 97 | 1357 | active |
| cloudflare/terraform-provider-cloudflare The official Terraform provider plugin for Cloudflare, letting users manage Cloudflare resources (zones, DNS records, load balancers, WAF r… | 98 | 1344 | active |
| containerd/runwasi A Rust library and set of containerd shims that let containerd run WebAssembly/WASI workloads directly or via Kubernetes through the CRI pl… | 93 | 1341 | active |
| Kubermatic Kubernetes Platform Kubermatic Kubernetes Platform (KKP) is an open-source central management platform for automating the lifecycle of thousands of Kubernetes … | 95 | 1338 | stable |
| democratic-csi/democratic-csi democratic-csi implements the Container Storage Interface (CSI) spec to provide dynamic storage provisioning for container orchestration sy… | 85 | 1336 | active |
| Azure/review-checklists A collection of Azure design review checklists covering landing zones, AKS, WAF, cost, and other Azure services, available as Excel spreads… | 68 | 1336 | active |
| k8gb-io/k8gb K8GB (Kubernetes Global Balancer) is a CNCF Incubating, open-source global server load balancing (GSLB) solution for Kubernetes, implemente… | 95 | 1334 | active |
| kubernetes-csi/csi-driver-nfs A Kubernetes CSI driver that lets clusters mount and dynamically provision persistent volumes from an existing NFSv3 or NFSv4 server. It cr… | 95 | 1333 | stable |
| kubernetes-sigs/scheduler-plugins A collection of out-of-tree scheduler plugins for Kubernetes built on the scheduler framework, including capacity scheduling, coscheduling … | 88 | 1326 | active |
| KusionStack/kusion Kusion is an intent-driven platform orchestrator for building Internal Developer Platforms (IDPs), written in Go and a CNCF Sandbox project… | 79 | 1323 | active |
| gliderlabs/registrator Registrator is a service registry bridge for Docker that automatically registers and deregisters Docker containers as services by inspectin… | 29 | 4675 | maintenance |
| kubernetes/ingress-gce GLBC is the Google Cloud (GCE) L7 load balancer controller for Kubernetes, managing external load balancers configured through the Kubernet… | 68 | 1302 | active |
| idoavrah/terraform-tui TFTUI is a terminal user interface (TUI) for Terraform built in Python, allowing users to visualize and interact with their Terraform state… | 94 | 1299 | active |
| crocofied/CoreObs CoreObs (CoreControl) is a self-hosted web dashboard for managing entire server infrastructures, built with Next.js/TypeScript and a Go mon… | 48 | 1297 | active |
| LINBIT/linstor-server LINSTOR is LINBIT's open-source software-defined storage controller that manages replicated block storage volumes across Linux server clust… | 98 | 1296 | stable |
| stategraph/stategraph Stategraph is a platform that replaces Terraform/OpenTofu's file-based state with a Postgres-backed dependency graph, enabling resource-lev… | 84 | 1285 | active |
| minamijoyo/tfmigrate tfmigrate is a CLI tool for safely migrating Terraform and OpenTofu state files in a GitOps-friendly, declarative way. It lets you write st… | 70 | 1277 | active |
| openBalena OpenBalena is an open-source platform for deploying and managing fleets of connected IoT devices running balenaOS, composed of backend serv… | 94 | 1275 | active |
| schemahero/schemahero SchemaHero is a database schema migration tool that lets you define table schemas declaratively in YAML and generates the SQL needed to rec… | 96 | 1273 | active |
| mbentley/docker-omada-controller A community-maintained Docker image that packages TP-Link's Omada Software Controller for centrally managing Omada networking hardware (acc… | 92 | 1273 | active |
| schenkd/nginx-ui A self-hosted web UI for viewing and editing nginx configuration files without using the CLI. It is delivered as a Docker container that mo… | 23 | 4466 | maintenance |
| project-akri/akri Akri is a Kubernetes Resource Interface, a CNCF Sandbox project written in Rust, that exposes heterogeneous edge leaf devices (IP cameras, … | 84 | 1264 | active |