Open-source infrastructure-as-code software
668 open-source libraries, tools and applications tagged infrastructure-as-code, ranked by how closely infrastructure-as-code is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
668 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| google/glazier Glazier is a Google-developed tool for automating Windows operating system installations across various device platforms. It boots systems … | 84 | 1261 | active |
| sl1pm4t/k2tf k2tf is a command-line tool that converts Kubernetes API objects from YAML manifests into Terraform HCL configuration. The generated .tf fi… | 44 | 1232 | active |
| Corosync Cluster Engine Corosync is a C-based Group Communication System providing a closed process group communication model with virtual synchrony guarantees, pl… | 69 | 1224 | active |
| AvitalTamir/cyphernetes Cyphernetes is a Cypher-inspired query language and CLI for Kubernetes that lets users express cluster operations as graph queries (MATCH/W… | 66 | 1221 | active |
| hashicorp/terraform-ls The official Terraform Language Server maintained by HashiCorp, implementing the Language Server Protocol to provide IDE features for Terra… | 95 | 1206 | active |
| aws-ia/taskcat TaskCat is a Python-based testing framework and CLI tool for AWS CloudFormation templates. It deploys templates across multiple AWS regions… | 76 | 1204 | active |
| sozercan/kubectl-ai A kubectl plugin written in Go that generates and applies Kubernetes manifests from natural-language prompts using OpenAI GPT or OpenAI API… | 21 | 1196 | active |
| rpardini/docker-registry-proxy An HTTPS caching proxy for Docker registries that provides centralized configuration and caching of image pulls from any registry (DockerHu… | 75 | 1192 | active |
| integrations/terraform-provider-github A Terraform provider plugin that manages GitHub resources such as repositories, teams, branch protections, actions secrets, rulesets, and w… | 94 | 1190 | active |
| topolvm/topolvm TopoLVM is a capacity-aware CSI (Container Storage Interface) plugin for Kubernetes that provisions persistent volumes using LVM2 on Linux … | 97 | 1182 | active |
| ClusterLabs/pacemaker Pacemaker is an advanced, scalable high-availability cluster resource manager written in C. It coordinates the configuration, start-up, mon… | 89 | 1179 | stable |
| nginx/nginx-gateway-fabric NGINX Gateway Fabric is an open-source Kubernetes Gateway API implementation that uses NGINX as the data plane. It configures NGINX via NGI… | 97 | 1175 | active |
| k1LoW/awspec awspec is a Ruby gem that lets you write RSpec tests for AWS resources, verifying their configuration and state. It provides a CLI for scaf… | 80 | 1173 | active |
| kayac/ecspresso ecspresso is a CLI deployment tool for Amazon ECS that manages services and task definitions as code in JSON, YAML, or Jsonnet files. It su… | 98 | 1135 | active |
| Itamae Itamae is a simple and lightweight configuration management tool for Ruby, inspired by Chef but with a simpler, Chef-like DSL that is not c… | 84 | 1134 | stable |
| GoogleCloudPlatform/cloud-foundation-toolkit Google's Cloud Foundation Toolkit provides production-ready Terraform blueprints encoding GCP best practices, plus a CLI for creating and m… | 92 | 1132 | active |
| weaveworks/weave-gitops Weave GitOps is an open-source developer platform that extends Flux to provide a UI and tooling for GitOps-based continuous delivery on Kub… | 73 | 1132 | active |
| argoproj-labs/argocd-autopilot Argo CD Autopilot is a Go-based CLI tool that provides an opinionated way to install and manage Argo CD itself using GitOps. It scaffolds a… | 48 | 1130 | active |
| AlchemillaHQ/Sylve Sylve is an open-source web-based management platform for FreeBSD that unifies Bhyve virtual machines, FreeBSD Jails, ZFS storage, networki… | 86 | 1124 | active |
| apenella/go-ansible go-ansible is a Go library that wraps the Ansible CLI so Go applications can execute commands like ansible-playbook, ansible, ansible-galax… | 98 | 1121 | active |
| Akash Network The source code for the Akash Network blockchain node, a Tendermint/CometBFT-powered node implementing a decentralized cloud computing mark… | 97 | 1116 | active |
| Sensu Go Sensu Go is an open-source, agent-based monitoring and observability pipeline for ephemeral infrastructure and distributed applications, re… | 87 | 1113 | active |
| QQ3221197721/cloudai-fusion CloudAI Fusion is a Go-based cloud-native platform that unifies multi-cloud infrastructure management with AI-assisted GPU scheduling acros… | 59 | 1110 | active |
| Open Cluster Management Open Cluster Management (OCM) is a CNCF sandbox project providing core components for managing fleets of Kubernetes clusters across multicl… | 95 | 1104 | active |
| digitalocean/go-libvirt A pure Go client library for interacting with libvirt via its RPC interface, without relying on C bindings. It uses code generators to prod… | 72 | 1099 | active |
| netbox-community/netbox-topology-views A NetBox plugin that generates visual network topology maps from devices and the cables defined in NetBox. It supports filtering by name, s… | 92 | 1096 | active |
| MKTXP MKTXP is a Prometheus exporter and CLI tool for Mikrotik RouterOS devices that exposes router metrics for monitoring, with a companion Graf… | 91 | 1093 | active |
| djylb/nps NPS Enhanced is a lightweight, actively maintained NAT traversal and reverse proxy system with a Web management UI, based on the original e… | 86 | 1088 | active |
| Ansible Runner Ansible Runner is a Python library and CLI tool that provides a stable, consistent interface for running Ansible programmatically, standalo… | 84 | 1086 | stable |
| Node Feature Discovery Node Feature Discovery (NFD) is a Kubernetes add-on that detects hardware features and system configuration on cluster nodes and advertises… | 100 | 1084 | active |
| moby/hyperkit HyperKit is a toolkit for embedding hypervisor capabilities in applications, providing a complete hypervisor based on xhyve/bhyve optimized… | 32 | 3714 | maintenance |
| hashicorp/terraform-provider-helm The official Terraform provider for Helm, written in Go, enabling installation and management of Helm chart releases on Kubernetes clusters… | 90 | 1076 | active |
| ansible-collections/community.general The community.general Ansible Collection, a bundle of community-maintained Ansible modules and plugins that are not part of more specialize… | 95 | 1074 | active |
| GoogleCloudPlatform/k8s-config-connector GCP Config Connector is a Kubernetes add-on that lets you manage Google Cloud resources (e.g., Cloud Spanner, Cloud Storage) declaratively … | 100 | 1072 | active |
| ovn-kubernetes/ovn-kubernetes OVN-Kubernetes is an open-source CNI plugin that provides a robust networking solution for Kubernetes clusters, built on OVN (Open Virtual … | 87 | 1066 | active |
| DBCDK/morph Morph is a CLI tool for managing and deploying NixOS host configurations, acting as a wrapper around nix-build, nix copy, and switch-to-con… | 61 | 1064 | active |
| facebook/dhcplb dhcplb is Facebook's production DHCP v4/v6 load balancer and relayer, also usable as a multithreaded DHCP server framework. It balances DHC… | 73 | 1063 | active |
| env0/terratag Terratag is a CLI tool that automatically applies tags or labels across an entire set of Terraform/OpenTofu (and Terragrunt) files, targeti… | 98 | 1058 | active |
| projectdiscovery/cloudlist Cloudlist is a multi-cloud CLI tool written in Go that lists assets from multiple cloud providers such as AWS, GCP, and Azure. It is intend… | 86 | 1058 | active |
| kubernetes/dns The Kubernetes DNS (kube-dns) project provides cluster-internal DNS resolution for Kubernetes services and pods. It ships containerized com… | 70 | 1058 | active |
| jrhouston/tfk8s tfk8s is a Go CLI tool that converts Kubernetes YAML manifests into Terraform HCL for use with the Terraform Kubernetes Provider. It suppor… | 23 | 1058 | active |
| kubernetes-sigs/ingress2gateway A Go CLI tool from Kubernetes SIG-Network that converts Ingress resources and provider-specific CRDs into Gateway API resources. It uses a … | 83 | 1054 | active |
| welliamcao/OpsManage OpsManage is a self-hosted automated operations platform built with Django and Celery that combines CI/CD code and application deployment, … | 23 | 3596 | maintenance |
| cloudposse/geodesic Geodesic is a Docker-based Linux toolbox container preloaded with a DevOps toolchain (kubectl, helm, terraform, aws cli, etc.) to give team… | 84 | 1051 | active |
| cdklabs/cdk-nag cdk-nag is a library that checks AWS CDK applications and CloudFormation templates for best practices using pre-built rule packs such as AW… | 91 | 1047 | active |
| k8up-io/k8up K8up is a Kubernetes and OpenShift backup operator built on Restic, distributed via Helm chart, that handles PVC and application backups th… | 95 | 1036 | stable |
| Trow-Registry/trow Trow is a lightweight OCI-compliant container image registry written in Rust that runs inside a Kubernetes cluster. It caches external imag… | 78 | 1031 | active |
| cloudamqp/lavinmq LavinMQ is a high-performance message queue and streaming server implementing the AMQP 0-9-1 and MQTT protocols, written in Crystal. It is … | 98 | 1027 | active |
| nlewo/comin Comin is a pull-mode GitOps deployment tool for NixOS (and nix-darwin) machines, running as a local daemon that polls Git repositories and … | 89 | 1024 | active |
| config-syncer/config-syncer Config Syncer (formerly Kubed) is a Kubernetes operator by AppsCode that keeps ConfigMaps and Secrets synchronized across namespaces and cl… | 67 | 1016 | active |
| nix-community/srvos SrvOS is a collection of opinionated, shareable NixOS modules and profiles optimized for servers, maintained by the nix-community and Numti… | 75 | 1014 | stable |
| metacontroller/metacontroller Metacontroller is a Kubernetes add-on that lets you write and deploy custom controllers as simple webhook scripts in any language. It handl… | 100 | 1010 | active |
| SquirrelCorporation/SquirrelServersManager Squirrel Servers Manager is an open-source, self-hosted web application for server and configuration management, powered by Ansible, Docker… | 10 | 995 | active |
| rancher/rke Rancher Kubernetes Engine (RKE) is a CLI tool that installs and manages Kubernetes clusters entirely within Docker containers, using a simp… | 10 | 3292 | maintenance |
| kimchi-project/kimchi Kimchi is an HTML5 web-based management interface for KVM virtual machines, built as a plugin for the Wok web framework. It lets administra… | 23 | 3196 | maintenance |
| snabbco/snabb Snabb is a simple and fast packet networking toolkit written in Lua on LuaJIT, using kernel-bypass Ethernet I/O. It compiles to a single bu… | 62 | 3033 | maintenance |
| XiaoMi/open-falcon Open-Falcon is a distributed, high-performance monitoring system originally developed by Xiaomi's AI & Cloud team for enterprise-scale infr… | 23 | 3020 | maintenance |
| baidu/bfs Baidu File System (BFS) is a distributed file system written in C++ designed for real-time applications, offering fault tolerance, low read… | 23 | 2847 | maintenance |
| solo-io/unik UniK is a Go-based platform that compiles application source code into unikernels and MicroVM images and deploys them across cloud provider… | 23 | 2826 | maintenance |
| snyk/driftctl driftctl is a free and open-source CLI that scans cloud providers (AWS, GitHub, Azure, GCP), maps resources against Terraform code, and det… | 66 | 2662 | maintenance |
| nolar/kopf Kopf is a Python framework and library for building Kubernetes operators with minimal boilerplate, using decorator-based handlers for custo… | 91 | 2638 | maintenance |
| google/ax AX (Agent Executor) is a distributed agent runtime from Google that provisions isolated, suspendable/resumable environments to execute AI a… | 81 | 13629 | experimental |
| allegro/ralph Ralph is a full-featured open-source Asset Management, DCIM, and CMDB system for data centers and back offices, built with Django. It track… | 92 | 2522 | maintenance |
| Serverspec Serverspec is a Ruby library for writing RSpec tests that verify servers are configured correctly, executing commands locally, via SSH, Win… | 64 | 2520 | maintenance |
| pytest-dev/pytest-testinfra Testinfra is a pytest plugin for writing unit tests in Python that verify the actual state of servers managed by tools like Ansible, Salt, … | 72 | 2478 | maintenance |
| github/glb-director GitHub's GLB Director is a set of components implementing a scalable, stateless Layer 4 load balancer for bare metal datacenter environment… | 67 | 2457 | maintenance |
| LeanerCloud/AutoSpotting AutoSpotting is a Go-based tool that automates the use of AWS Spot instances in existing AutoScaling groups, saving 60-90% on EC2 costs. It… | 60 | 2372 | maintenance |
| bilibili/overlord Overlord is Bilibili's Go-based proxy and cluster management platform for memcache and Redis/Redis Cluster, providing an automated high-ava… | 23 | 2246 | maintenance |
| rexray/rexray REX-Ray is a vendor-agnostic container storage orchestration engine that provides persistent storage for Docker, Kubernetes, and Mesos work… | 23 | 2221 | maintenance |
| NixOS/nixops NixOps is a command-line tool for declaratively deploying NixOS machines to networks or cloud providers such as AWS, Hetzner, and GCE. It s… | 55 | 2201 | maintenance |
| 28mm/blast-radius Blast Radius is a tool that renders interactive visualizations of Terraform dependency graphs using Graphviz layouts enhanced with d3.js. I… | 32 | 2193 | maintenance |
| retspen/webvirtmgr WebVirtMgr is a libvirt-based web interface for managing KVM virtual machines, written in Python/Django. It lets users create and configure… | 23 | 2099 | maintenance |
| NagiosEnterprises/nagioscore Nagios Core is a host, service, and network monitoring program written in C, with CGI-based web interface for viewing status and history. I… | 87 | 2044 | maintenance |
| alibaba/LVS Alibaba's distribution of Linux Virtual Server (LVS) adding advanced features to the kernel IPVS load balancer. It introduces the FULLNAT p… | 32 | 2043 | maintenance |
| yyyar/gobetween gobetween is a modern, minimalistic L4 load balancer and reverse proxy written in Go, distributed as a single binary. It supports TCP, TLS … | 36 | 1988 | maintenance |
| gocircuit/circuit Circuit is a programmable PaaS/IaaS platform written in Go for managing, discovering, synchronizing, and orchestrating services and hosts a… | 32 | 1976 | maintenance |
| logcabin/logcabin LogCabin is a distributed storage system built on the Raft consensus algorithm that provides a small amount of highly replicated, consisten… | 32 | 1971 | maintenance |
| youtube/doorman Doorman is a Go-based gRPC service for global distributed client-side rate limiting, letting clients voluntarily limit their use of shared … | 10 | 1952 | maintenance |
| mistio/mist-ce Mist CE is an open-source multicloud management platform providing a unified web interface, RESTful API, and CLI to manage public clouds, p… | 29 | 1912 | maintenance |
| cloudflare/computer Cloudflare Computer is a TypeScript library providing a virtual filesystem backed by a Durable Object's SQLite storage, with pluggable exec… | 80 | 9541 | experimental |
| adammck/terraform-inventory A small Go CLI application that generates a dynamic Ansible inventory from a Terraform state file. It lets you provision infrastructure wit… | 45 | 1843 | maintenance |
| bilibili/discovery Discovery is Bilibili's production-ready service registry used for locating middle-tier servers to enable resilient load balancing and fail… | 23 | 1803 | maintenance |
| devopsgroup-io/vagrant-digitalocean A Vagrant provider plugin that manages DigitalOcean Droplets (virtual machines) directly from a Vagrantfile. It supports creating, destroyi… | 23 | 1708 | maintenance |
| kubicorn/kubicorn Kubicorn is a free and open source Go project for creating, managing, snapshotting, and scaling Kubernetes cluster infrastructure in the pu… | 23 | 1681 | maintenance |
| lastbackend/lastbackend Last.Backend is an open-source container management platform written in Go that automates deployment, scaling, and management of containeri… | 23 | 1659 | maintenance |
| yaoweibin/nginx_tcp_proxy_module A third-party Nginx module written in C that adds TCP proxying capabilities to Nginx, including upstream load balancing with ip_hash, activ… | 32 | 1646 | maintenance |
| contribsys/einhorn Einhorn is a language-independent shared socket manager that runs and supervises multiple copies of a long-lived process, opening server so… | 63 | 1645 | maintenance |
| coinbase/terraform-landscape Terraform Landscape is a Ruby-based CLI tool that reformats the output of `terraform plan` into a more readable, colorized format. It works… | 23 | 1626 | maintenance |
| Terry-Mao/bfs BFS is a distributed file system for small-file storage written in Go, modeled after Facebook's Haystack architecture. It consists of direc… | 23 | 1595 | maintenance |
| gpushare A Kubernetes scheduler extender that enables multiple pods to share the same NVIDIA GPU device, increasing GPU utilization for inference an… | 32 | 1532 | maintenance |
| tkestack/tke TKEStack is an open-source container management platform built on Kubernetes for organizations running containers in production. It provide… | 23 | 1532 | maintenance |
| Banzai Cloud Pipeline Banzai Cloud Pipeline is a solution-oriented application platform for developing, deploying, and securely scaling container-based applicati… | 23 | 1503 | maintenance |
| rubber/rubber Rubber is a Capistrano/Rails plugin that automates deploying, managing, and scaling multi-instance Rails applications across providers like… | 32 | 1450 | maintenance |
| iann0036/AWSConsoleRecorder A browser extension for Chrome and Firefox that records actions performed in the AWS Management Console and generates equivalent code. It o… | 10 | 1418 | maintenance |
| google/crfs CRFS is a read-only FUSE filesystem that mounts container images directly from a container registry without pulling them locally first. It … | 10 | 1405 | maintenance |
| DNSPod/dnspod-sr dnspod-sr is a high-performance recursive DNS server written in C by DNSPod, designed for Linux. It claims roughly double the throughput of… | 57 | 1375 | maintenance |
| TritonDataCenter/triton Triton DataCenter is an open-source cloud management platform (formerly SmartDataCenter) that delivers container-based infrastructure acros… | 41 | 1371 | maintenance |
| NationalSecurityAgency/SIMP SIMP (System Integrity Management Platform) is an open-source system automation and configuration management framework built on Puppet, pro… | 10 | 1336 | maintenance |
| DerDanilo/proxmox-stuff A collection of shell scripts and Ansible roles for administering Proxmox VE, Proxmox Mail Gateway, and Proxmox Backup Server. It includes … | 69 | 1331 | maintenance |
| stelligent/cfn_nag cfn_nag is a command-line linting tool that scans AWS CloudFormation templates for insecure infrastructure patterns such as overly permissi… | 23 | 1313 | maintenance |