domain: infrastructure-as-code
663 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| shinken-solutions/shinken Shinken is a Nagios-compatible monitoring framework written in Python, designed with a flexible, distributed architecture that scales to la… | 32 | 1136 | maintenance |
| ehazlett/stellar Stellar is a simplified container runtime cluster system built on containerd, written in Go. It joins one or more nodes into an eventually … | 23 | 1133 | maintenance |
| hashivim/vim-terraform A Vim plugin providing Terraform integration, including a :Terraform command with tab completion, syntax highlighting for HCL/Terraform fil… | 43 | 1109 | maintenance |
| gaia-app/gaia Gaia is a self-hosted web application providing a UI for Terraform modules and self-service infrastructure. It lets teams import modules fr… | 23 | 1080 | maintenance |
| berkshelf/berkshelf Berkshelf is a CLI tool for managing Chef Infra cookbooks and their dependencies, resolving and fetching them from sources like the Chef Su… | 23 | 1069 | maintenance |
| voilet/cmdb A Django-based CMDB (Configuration Management Database) web application with integrated SaltStack UI for IT asset management. It provides a… | 32 | 1062 | maintenance |
| lework/kainstall A single-file shell script that installs Kubernetes high-availability clusters based on kubeadm with one command, including server initiali… | 23 | 1057 | maintenance |
| 0xPolygon/polygon-edge Polygon Edge is a modular, extensible framework written in Go for building Ethereum-compatible (EVM) blockchain networks with custom consen… | 10 | 1052 | maintenance |
| ljacobsson/cfn-diagram cfn-diagram is a Node.js CLI tool that visualizes AWS CloudFormation, SAM, and CDK templates as diagrams. It can generate draw.io files, in… | 23 | 1019 | maintenance |
| zhaofengli/attic Attic is a self-hostable, multi-tenant Nix binary cache server backed by S3-compatible storage, written in Rust. It provides global dedupli… | 76 | 2035 | experimental |
| google/ax AX (Agent Executor) is a distributed agent runtime from Google that provisions isolated, suspendable/resumable environments to execute AI a… | 80 | 1970 | experimental |
| nubskr/walrus Walrus is a distributed log streaming engine written in Rust, built on a high-performance write-ahead-log storage engine with segment-based… | 62 | 1923 | experimental |
| aurae-runtime/aurae Aurae is a memory-safe distributed systems runtime daemon written in Rust that acts as a process manager and PID-1 initialization system fo… | 67 | 1908 | experimental |
| GoogleCloudPlatform/terraformer Terraformer is a Go CLI tool that generates Terraform configuration (tf/) and tfstate files from existing cloud infrastructure, effectively… | 10 | 14559 | abandoned |
| rebuy-de/aws-nuke A Go CLI tool that deletes all resources from an AWS account, with dry-run defaults and multiple safety confirmations. This original rebuy-… | 10 | 5792 | abandoned |
| tenable/terrascan Terrascan is a static code analyzer for Infrastructure as Code that detects compliance and security violations across Terraform, CloudForma… | 10 | 5211 | abandoned |
| hashicorp/terraform-cdk CDK for Terraform (CDKTF) is a framework for defining infrastructure as code using general-purpose programming languages (TypeScript, Pytho… | 10 | 5074 | abandoned |
| KubeOperator/KubeOperator KubeOperator is an open-source lightweight Kubernetes distribution that helps enterprises plan (Day 0), deploy (Day 1), and operate (Day 2)… | 10 | 4978 | abandoned |
| dtan4/terraforming Terraforming is a Ruby CLI gem that exports existing AWS resources into Terraform configuration files (.tf) and state files (.tfstate). It … | 10 | 4255 | abandoned |
| weaveworks/ignite Weave Ignite is a VM manager that runs Firecracker microVMs from OCI/Docker images with a container-like UX and declarative GitOps manageme… | 10 | 3529 | abandoned |
| rancher/k3os k3OS is a minimal Linux distribution purpose-built to run Kubernetes via k3s, designed so the entire OS is managed and upgraded through kub… | 10 | 3478 | abandoned |
| google/lmctfy lmctfy (Let Me Contain That For You) is the open-source version of Google's container stack, providing Linux application containers with re… | 10 | 3403 | abandoned |
| ha/doozerd Doozer is a highly-available, fully consistent distributed data store for small amounts of critical in-memory data, built on a consensus al… | 32 | 3251 | abandoned |
| Netflix/consoleme ConsoleMe is a web service from Netflix that centralizes AWS IAM permission management, offering console login, self-service permission req… | 10 | 3196 | abandoned |
| sensu/sensu Sensu 1.x (Sensu Core) is a Ruby-based, scalable monitoring framework for composing infrastructure monitoring systems with checks, handlers… | 10 | 2865 | abandoned |
| kubernetes-retired/external-storage A retired Kubernetes incubator project containing community-maintained out-of-tree dynamic PersistentVolume provisioners and a helper libra… | 10 | 2690 | abandoned |
| lg/murder Murder is a Ruby-based deploy tool from Twitter that uses BitTorrent (via BitTornado) to distribute files to hundreds or tens of thousands … | 10 | 2514 | abandoned |
| coreos/fleet fleet is a distributed init system that ties together systemd and etcd to schedule systemd units across a cluster of Linux machines. It is … | 10 | 2415 | abandoned |
| docker-archive/deploykit InfraKit is a Go-based toolkit for declarative, self-healing infrastructure orchestration, built from small pluggable components that activ… | 10 | 2252 | abandoned |
| Netflix/asgard Asgard is a web-based tool from Netflix for managing application deployments and cloud infrastructure in Amazon Web Services. It is depreca… | 10 | 2228 | abandoned |
| devstructure/blueprint Blueprint is a Python CLI tool that reverse-engineers server configuration by inspecting package managers, config file changes, and source-… | 32 | 2157 | abandoned |
| hyperhq/hyperd HyperContainer daemon (hyperd) with a companion CLI (hyperctl) that runs Docker images on plain hypervisors like QEMU and Xen. It combines … | 10 | 2010 | abandoned |
| systeminit/si System Initiative is an AI-native infrastructure automation platform where AI agents discover infrastructure, propose changes, and execute … | 10 | 1808 | abandoned |
| lyft/clutch Clutch is an extensible open-source web UI and API platform from Lyft for simplifying, accelerating, and de-risking common infrastructure m… | 10 | 1771 | abandoned |
| coreos/torus Torus is a distributed storage system written in Go that pools resources across multiple nodes, coordinated consistently through etcd using… | 10 | 1754 | abandoned |
| faucetsdn/ryu Ryu is a component-based software defined networking (SDN) framework written in Python, providing well-defined APIs for building network ma… | 32 | 1603 | abandoned |
| jeremykross/konstellate Konstellate is a free, open-source GUI for visualizing, creating, and editing Kubernetes resources and their relationships. It lets users b… | 32 | 1457 | abandoned |
| nanopack/yoke Yoke is a Postgres high-availability cluster manager written in Go that provides automatic failover and automated cluster recovery across a… | 10 | 1341 | abandoned |
| cloudavail/aws-missing-tools A suite of shell scripts that extends the AWS command line tools with utilities for managing EC2, EBS, RDS, IAM, CloudFormation, Auto Scali… | 32 | 1333 | abandoned |
| cloudfoundry-attic/vcap VCAP is the original open-source Cloud Foundry platform-as-a-service codebase, comprising core components such as the cloud controller, rou… | 10 | 1304 | abandoned |
| heketi/heketi Heketi is a RESTful volume management framework for GlusterFS that automates the lifecycle of GlusterFS volumes, including brick placement … | 10 | 1259 | abandoned |
| alibaba/tfs TFS (Taobao File System) is a distributed file system developed by Taobao, designed similar to Google File System. It is optimized for stor… | 10 | 1244 | abandoned |
| open-falcon-archive/of-release Open-Falcon (of-release) is an open-source, enterprise-level monitoring system originally developed at Xiaomi, providing metric collection,… | 23 | 1241 | abandoned |
| briefercloud/layerform Layerform is a Terraform wrapper CLI that lets engineers build reusable environment stacks from plain .tf files by stacking infrastructure … | 10 | 1207 | abandoned |
| brandonhilkert/fucking_shell_scripts A Ruby-based server configuration management tool that provisions cloud servers (via the fog gem) and configures them by running plain shel… | 32 | 1202 | abandoned |
| mozilla/mig MIG (Mozilla InvestiGator) is a distributed platform for real-time digital forensics and endpoint investigation, using agents installed acr… | 10 | 1202 | abandoned |
| dokku-alt/dokku-alt Dokku Alternative is a Docker-powered mini-Heroku PaaS, forked from Dokku, that bundles stable plugins for databases, TLS, zero-downtime de… | 10 | 1154 | abandoned |
| apache/trafficcontrol Apache Traffic Control is an open-source implementation of a full Content Delivery Network, built around Apache Traffic Server as the cachi… | 10 | 1153 | abandoned |
| klothoplatform/klotho Klotho is an open-source CLI tool that transforms plain application code into cloud-native code using in-code annotations, generating infra… | 51 | 1146 | abandoned |
| sprinkle-tool/sprinkle Sprinkle is a Ruby-based software provisioning tool that builds remote servers via a domain-specific language for defining packages, depend… | 32 | 1143 | abandoned |
| kubernetes-retired/bootkube Bootkube is a Go CLI tool for launching self-hosted Kubernetes clusters by running a temporary control plane that bootstraps a permanent, s… | 10 | 1143 | abandoned |
| newcontext-oss/kitchen-terraform A set of Test Kitchen plugins that enable converging Terraform configurations and verifying the resulting infrastructure with InSpec contro… | 10 | 1121 | abandoned |
| kubernetes-retired/kube-aws kube-aws is a command-line tool for declaratively creating, updating, and destroying Kubernetes clusters on AWS using CloudFormation. The p… | 10 | 1111 | abandoned |
| prometheus/prometheus Prometheus is an open-source systems and service monitoring toolkit and time series database, originally built at SoundCloud and now a CNCF… | 99 | 65839 | stable |
| Traefik Proxy Traefik is a cloud-native HTTP reverse proxy and load balancer written in Go that automatically discovers services from orchestrators like … | 95 | 64607 | stable |
| seaweedfs/seaweedfs SeaweedFS is a fast distributed storage system written in Go that provides S3-compatible object storage, a POSIX-compliant distributed file… | 95 | 34299 | active |
| jumpserver/jumpserver JumpServer is an open-source Privileged Access Management (PAM) platform and bastion host that provides secure, audited access to SSH, RDP,… | 99 | 31455 | stable |
| netbirdio/netbird NetBird is an open-source zero-trust networking platform that builds WireGuard-based peer-to-peer overlay networks with centralized access … | 95 | 28676 | active |
| slackhq/nebula Nebula is a scalable overlay networking tool (mesh VPN) built on the Noise Protocol Framework, using certificates and security groups for m… | 95 | 17658 | stable |
| cloudflare/cloudflared cloudflared is the command-line client and daemon for Cloudflare Tunnel, which creates outbound-only connections from your origin servers t… | 99 | 15395 | stable |
| juicedata/juicefs JuiceFS is a high-performance, POSIX-compatible distributed file system that stores file data in object storage (e.g., Amazon S3) and metad… | 98 | 14358 | stable |
| coder/coder Coder is a self-hosted platform for provisioning cloud development environments (workspaces) defined with Terraform, accessible via VS Code… | 95 | 14260 | active |
| gravitl/netmaker Netmaker is an open-source platform that automates the creation and management of WireGuard-based virtual mesh networks, from homelab to en… | 91 | 11763 | active |
| skypilot-org/skypilot SkyPilot is an open-source AI compute platform that unifies fragmented infrastructure (Kubernetes, Slurm, VMs, 20+ clouds) into a single po… | 97 | 10529 | active |
| TechnitiumSoftware/DnsServer Technitium DNS Server is an open-source, cross-platform authoritative and recursive DNS server built on .NET, designed for self-hosting wit… | 94 | 9655 | stable |
| freebsd/freebsd-src The official publish-only Git mirror of the FreeBSD source tree, containing the complete kernel, userland, libraries, boot loader, and buil… | 77 | 9294 | stable |
| FastDFS FastDFS is an open-source high-performance distributed file system written in C, providing file storing, syncing, uploading, and downloadin… | 94 | 9249 | stable |
| smallstep/certificates step-ca is an online private certificate authority (X.509 and SSH) and ACME server for secure, automated certificate management in DevOps e… | 91 | 8779 | active |
| turbot/steampipe Steampipe is a zero-ETL CLI tool that exposes APIs and cloud services as relational database tables so they can be queried live with standa… | 98 | 7934 | active |
| openmediavault/openmediavault openmediavault is a network attached storage (NAS) operating system solution based on Debian Linux, providing a web-based administration in… | 76 | 6917 | active |
| kvcache-ai/Mooncake Mooncake is a KVCache-centric disaggregated serving platform for LLM inference, originally built to serve Kimi by Moonshot AI. It separates… | 91 | 6398 | active |
| derailed/popeye Popeye is a read-only CLI tool that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations.… | 59 | 6346 | active |
| aidlearning/AidLearning-FrameWork AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 70 | 5797 | active |
| awslabs/mountpoint-s3 Mountpoint for Amazon S3 is a high-throughput FUSE file client that mounts an Amazon S3 bucket as a local file system. It translates file o… | 95 | 5758 | stable |
| cubefs/cubefs CubeFS is a CNCF-graduated, cloud-native distributed file and object storage system written in Go. It supports S3, HDFS, and POSIX access p… | 90 | 5636 | stable |
| tonarino/innernet innernet is a self-hosted private network (overlay VPN) system built on WireGuard, with a coordination server and client CLI written in Rus… | 86 | 5535 | active |
| winglang/wing Wing is an open-source, cloud-oriented programming language that unifies infrastructure definitions and application runtime code in a singl… | 73 | 5398 | active |
| vllm-project/semantic-router vLLM Semantic Router is an open-source programmable routing and control layer for building Mixture-of-Models systems across heterogeneous L… | 76 | 5315 | active |
| tsuru/tsuru Tsuru is an open-source, extensible Platform as a Service (PaaS) that simplifies application deployment and management on top of Kubernetes… | 99 | 5305 | active |
| facebookincubator/katran Katran is a C++ library and BPF program for building a high-performance layer 4 load balancing forwarding plane. It leverages the Linux ker… | 77 | 5304 | active |
| OPNsense OPNsense is an open-source, FreeBSD-based firewall and routing platform with a web GUI, REST API, and extensible plugin system. It provides… | 77 | 4653 | active |
| hyperlight-dev/hyperlight Hyperlight is a lightweight Virtual Machine Manager (VMM) library, written in Rust, that embeds micro virtual machines into applications fo… | 85 | 4635 | active |
| llm-d/llm-d llm-d is a Kubernetes-native distributed LLM inference serving stack that orchestrates model servers like vLLM and SGLang across clusters. … | 82 | 4164 | active |
| ministackorg/ministack MiniStack is a free, MIT-licensed local AWS emulator that mimics 60+ AWS services (S3, SQS, SNS, DynamoDB, Lambda, EC2, RDS, ElastiCache, E… | 77 | 4140 | active |
| cloudflare/mcp-server-cloudflare A collection of Model Context Protocol (MCP) servers from Cloudflare that let MCP clients like Cursor or Claude manage Cloudflare services … | 84 | 4117 | active |
| octelium/octelium Octelium is a free, open-source, self-hosted unified zero trust secure access platform built on Kubernetes. It can operate as a remote acce… | 86 | 4025 | active |
| kumahq/kuma Kuma is a CNCF Sandbox, Envoy-based service mesh that provides L4-L7 connectivity, discovery, security (mTLS), observability, and traffic c… | 94 | 3995 | stable |
| spdk/spdk SPDK is a set of C libraries, drivers, and tools for building high-performance, scalable user-mode storage applications. It moves storage d… | 86 | 3646 | stable |
| iann0036/iamlive A Go CLI tool that generates IAM policies by monitoring AWS, Azure, or GCP API calls via client-side monitoring or an embedded proxy. It ob… | 83 | 3407 | active |
| zalando/skipper Skipper is an HTTP router and reverse proxy written in Go, designed for service composition with support for hundreds of thousands of dynam… | 95 | 3319 | stable |
| PatchMon/PatchMon PatchMon is a self-hostable, AGPL-licensed Linux patch management and server monitoring platform with a lightweight outbound-only agent and… | 84 | 3296 | active |
| cruise-control-for-kafka/cruise-control Cruise Control is a Java-based service that automates dynamic workload rebalancing and self-healing for Apache Kafka clusters. It tracks br… | 93 | 3042 | active |
| envoyproxy/gateway Envoy Gateway is an open-source control plane that manages Envoy Proxy as a standalone or Kubernetes-based application gateway, using Kuber… | 99 | 2990 | stable |
| CanineHQ/canine Canine is an open-source, self-hosted PaaS that turns any Kubernetes cluster into a Heroku-like deployment platform. It provides git-push d… | 67 | 2917 | active |
| kubernetes-sigs/kueue Kueue is a Kubernetes-native job queueing system providing APIs and controllers that decide when batch, HPC, and AI/ML workloads should be … | 95 | 2906 | active |
| frain-dev/convoy Convoy is an open-source, high-performance webhooks gateway for reliably ingesting, persisting, debugging, and delivering webhook events at… | 95 | 2862 | active |
| ascending-llc/jarvis-registry Jarvis Registry is an open-source, enterprise-grade MCP and A2A agent gateway and workflow orchestration platform that gives AI copilots an… | 84 | 2757 | active |
| versity/versitygw VersityGW is a high-performance, Apache-2.0 licensed S3 gateway written in Go that exposes an S3-compatible API backed by a local POSIX fil… | 94 | 2726 | active |
| envoyproxy/ratelimit A Go/gRPC rate limiting service from the Envoy project that provides centralized, generic rate limiting for distributed applications. It st… | 67 | 2686 | active |
| Ysurac/openmptcprouter OpenMPTCProuter is an OpenWrt-based router distribution that aggregates multiple internet connections (fiber, ADSL, 4G/5G, etc.) using Mult… | 77 | 2473 | active |