Open-source infrastructure-as-code software
241 open-source libraries, tools and applications tagged infrastructure-as-code, ranked by how closely infrastructure-as-code is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
241 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Terraform Terraform is HashiCorp's infrastructure-as-code tool that codifies cloud and on-prem resources into declarative configuration files which c… | 100 | 49931 | stable |
| Serverless Framework The Serverless Framework is a CLI tool and framework that deploys code and cloud infrastructure together using simple YAML syntax, primaril… | 93 | 46916 | active |
| OpenTofu OpenTofu is an open-source infrastructure-as-code CLI tool for declaratively building, changing, and versioning cloud infrastructure, forke… | 91 | 30269 | stable |
| OpenTofu OpenTofu is an open‑source, CLI‑driven infrastructure as code tool that lets you define, plan, and apply cloud and on‑prem resources using … | 91 | 30269 | active |
| SST SST is a framework for building and deploying modern full-stack applications on your own cloud infrastructure, with the entire app defined … | 83 | 26341 | active |
| Argo CD Argo CD is a declarative GitOps continuous delivery tool for Kubernetes that keeps Git repositories as the source of truth for desired appl… | 94 | 24341 | stable |
| Coder Coder is a self-hosted platform for provisioning cloud development environments (workspaces) defined with Terraform, accessible via VS Code… | 95 | 17074 | active |
| kubernetes/kops kOps (Kubernetes Operations) is a CLI tool for creating, upgrading, and maintaining production-grade, highly available Kubernetes clusters,… | 96 | 16692 | active |
| hashicorp/packer HashiCorp Packer is a CLI tool that builds identical machine images (AMIs, VMDK, Docker images, etc.) for multiple platforms in parallel fr… | 94 | 15807 | stable |
| saltstack/salt Salt is a Python-based, event-driven automation framework for deploying, configuring, and managing IT infrastructure at scale using a maste… | 94 | 15678 | stable |
| cert-manager cert-manager is a Kubernetes controller that adds Certificate and Issuer resource types to clusters and automates obtaining, renewing, and … | 98 | 14111 | stable |
| AWS CDK The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure in code using familiar programming langua… | 95 | 12941 | stable |
| Infracost Infracost is a cloud cost intelligence tool that estimates monthly costs and flags FinOps best practices for Terraform, Terragrunt, CloudFo… | 90 | 12565 | active |
| Crossplane Crossplane is a CNCF framework for building cloud native control planes on top of Kubernetes without writing code. It lets platform teams d… | 94 | 12137 | stable |
| hashicorp/terraform-provider-aws The official Terraform provider plugin for Amazon Web Services, written in Go and maintained by HashiCorp. It enables Terraform to define, … | 95 | 11115 | stable |
| kubernetes/kompose Kompose is an official Kubernetes CLI tool that converts Docker Compose files into Kubernetes (or OpenShift) resource manifests such as Dep… | 77 | 10644 | active |
| Terragrunt Terragrunt is a flexible orchestration tool that lets Infrastructure as Code written in OpenTofu/Terraform scale, adding a configuration an… | 94 | 9883 | stable |
| AWS Serverless Application Model (SAM) The AWS Serverless Application Model (SAM) transform is a CloudFormation macro, published as the aws-sam-translator Python package, that co… | 94 | 9574 | active |
| Atlantis Atlantis is a self-hosted Go application that automates Terraform workflows through pull requests. It listens for webhook events from GitHu… | 100 | 9332 | stable |
| Atlas Atlas is a language-agnostic CLI tool for managing and migrating database schemas as code, supporting declarative (Terraform-like) and vers… | 91 | 8761 | stable |
| Flux v2 Flux v2 is an open and extensible continuous delivery solution for Kubernetes that keeps clusters in sync with Git repositories and OCI art… | 99 | 8445 | stable |
| chef/chef Chef Infra is a configuration management platform that turns infrastructure into code, automating how systems are configured, deployed, and… | 67 | 8248 | active |
| gruntwork-io/terratest Terratest is a Go library that makes it easier to write automated tests for infrastructure code such as Terraform, Packer, Docker, Kubernet… | 94 | 7981 | stable |
| puppetlabs/puppet Puppet is a server automation framework and application that manages the configuration of Linux, Unix, and Windows systems based on a centr… | 74 | 7936 | active |
| AWS Serverless Application Model (SAM) AWS SAM CLI is an open-source command-line tool for building, locally testing, debugging, and deploying serverless applications defined wit… | 99 | 6737 | active |
| goss-org/goss Goss is a YAML-based server testing and validation tool, a fast serverspec alternative that generates tests from the current system state. … | 84 | 5988 | active |
| Helmfile Helmfile is a declarative CLI tool for deploying Kubernetes Helm charts, Kustomize configs, and raw manifests as Helm releases from version… | 100 | 5218 | active |
| eksctl-io/eksctl eksctl is the official command-line tool for creating and managing Amazon EKS (Elastic Kubernetes Service) clusters, written in Go and buil… | 99 | 5214 | active |
| diggerhq/digger Digger (now rebranded OpenTaco) is an open-source Infrastructure-as-Code orchestration tool that runs Terraform plan and apply directly ins… | 94 | 5048 | active |
| hashicorp/terraform-provider-azurerm The official Terraform provider plugin for Azure Resource Manager, enabling declarative management of Azure resources via HashiCorp Terrafo… | 95 | 4978 | active |
| cloudtools/troposphere A Python library for programmatically generating AWS CloudFormation templates as JSON or YAML. It provides typed classes for AWS resources … | 94 | 4942 | stable |
| cdk8s cdk8s is an open-source software development framework for defining Kubernetes applications and reusable abstractions using familiar progra… | 67 | 4858 | active |
| kubernetes-sigs/cluster-api Cluster API is a Kubernetes subproject providing declarative APIs and tooling for provisioning, upgrading, and operating multiple Kubernete… | 95 | 4336 | stable |
| DNSControl/dnscontrol DNSControl is an infrastructure-as-code tool for managing DNS zones and registrars via a JavaScript-compatible DSL. It pushes DNS records t… | 99 | 3969 | active |
| gofireflyio/aiac aiac is a command line tool and Go library that uses LLM providers such as OpenAI, Amazon Bedrock, and Ollama to generate Infrastructure-as… | 52 | 3786 | active |
| octodns/octodns octoDNS is a Python tool for managing DNS records as code across multiple DNS providers. It uses a pluggable architecture so DNS zone confi… | 77 | 3773 | stable |
| RhinoSecurityLabs/cloudgoat CloudGoat is Rhino Security Labs' 'Vulnerable by Design' AWS deployment tool that provisions intentionally vulnerable cloud environments fo… | 72 | 3738 | active |
| vitobotta/hetzner-k3s hetzner-k3s is a CLI tool written in Crystal that creates production-ready Kubernetes (k3s) clusters on Hetzner Cloud from a single YAML co… | 90 | 3694 | active |
| Bicep Bicep is a declarative infrastructure-as-code language and toolchain for describing and deploying Azure resources, compiling down to ARM te… | 95 | 3657 | active |
| Terramate Terramate is an open-source Infrastructure as Code orchestration and code generation platform written in Go, designed to help Terraform, Op… | 95 | 3633 | active |
| gardener/gardener Gardener is a Kubernetes-native system for managing the full lifecycle of homogeneous Kubernetes clusters at scale across any cloud or infr… | 95 | 3471 | active |
| digitalocean/doctl doctl is the official command-line interface for the DigitalOcean API, written in Go. It lets users manage droplets, Kubernetes clusters, d… | 95 | 3456 | active |
| FairwindsOps/polaris Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration against 30+ built-in best-pract… | 97 | 3396 | active |
| im2nguyen/rover Rover is an interactive Terraform visualizer that parses Terraform plan files and configuration to generate a resource overview, map, and g… | 34 | 3348 | active |
| disko disko is a declarative disk partitioning and formatting tool for NixOS that lets you define disks, partitions, filesystems, and mount point… | 80 | 3332 | active |
| gruntwork-io/cloud-nuke cloud-nuke is a Go CLI tool that deletes all resources in a cloud account (primarily AWS, supporting 125+ resource types), designed for cle… | 91 | 3193 | active |
| InSpec Chef InSpec is an open-source testing framework for infrastructure that expresses compliance, security, and policy requirements as human- a… | 89 | 3097 | active |
| kubernetes-sigs/kro kro (Kube Resource Orchestrator) is a Kubernetes-native controller that lets you define custom APIs composed of groups of Kubernetes resour… | 88 | 3077 | active |
| Telmate/terraform-provider-proxmox A Terraform provider plugin for the Proxmox virtualization platform, written in Go. It exposes Terraform resources to provision and manage … | 91 | 2953 | active |
| microvm-nix/microvm.nix A Nix Flake for building and running lightweight NixOS MicroVMs on NixOS/Linux and macOS hosts using one of eight hypervisors such as QEMU,… | 75 | 2949 | active |
| kubesphere/kubekey KubeKey (kk) is a lightweight task-flow execution tool written in Go for installing and managing Kubernetes clusters, supporting all-in-one… | 96 | 2867 | active |
| Checkmarx/kics KICS (Keeping Infrastructure as Code Secure) is an open-source static analysis tool by Checkmarx that scans IaC files for security vulnerab… | 97 | 2717 | active |
| Terraform Google Provider The official Terraform provider plugin for Google Cloud Platform, maintained by Google and HashiCorp. It lets Terraform provision and manag… | 95 | 2662 | active |
| AWS Controllers for Kubernetes (ACK) AWS Controllers for Kubernetes (ACK) is a collection of Kubernetes custom resource definitions and controllers that let you define and mana… | 76 | 2635 | active |
| Architect Architect is an open-source framework and CLI for building Functional Web Apps (FWAs) on AWS serverless infrastructure using concise declar… | 65 | 2624 | active |
| FairwindsOps/pluto Pluto is a Go command-line utility from Fairwinds that detects deprecated and removed Kubernetes apiVersions in static manifests, Helm char… | 97 | 2589 | stable |
| splunk/attack_range Splunk Attack Range is a tool that builds instrumented, vulnerable lab environments in the cloud (AWS, Azure, GCP) or locally using Terrafo… | 81 | 2562 | active |
| Qovery Platform Qovery Engine is the Rust orchestration runtime behind Qovery's Kubernetes control plane, turning API operations into reproducible infrastr… | 75 | 2465 | active |
| iann0036/former2 Former2 scans your existing AWS account resources and generates Infrastructure-as-Code outputs such as CloudFormation, Terraform, Troposphe… | 70 | 2415 | active |
| antonbabenko/terraform-skill An Agent Skills-compatible plugin that gives AI coding agents (Claude Code, Cursor, Copilot, Gemini CLI, etc.) best-practice knowledge for … | 69 | 2399 | active |
| cycloidio/terracognita TerraCognita is a Go CLI tool that reverse-engineers existing cloud infrastructure on AWS, GCP, Azure, and VMware vSphere into Terraform HC… | 37 | 2394 | active |
| bpg/terraform-provider-proxmox A Terraform and OpenTofu provider that enables declarative management of Proxmox Virtual Environment resources such as VMs, containers, sto… | 96 | 2274 | active |
| AutomatedLab/AutomatedLab AutomatedLab is a PowerShell framework for provisioning complex test and lab environments on Hyper-V or Azure using simple declarative scri… | 80 | 2228 | active |
| EKS Anywhere Amazon EKS Anywhere is an open-source tool for creating and operating Kubernetes clusters on your own infrastructure, built on Amazon EKS D… | 98 | 2100 | active |
| sealerio/sealer Sealer is a CNCF CLI tool that packages a Kubernetes cluster together with all application dependencies (container images, YAML manifests, … | 30 | 2094 | active |
| BOSH Cloud Foundry BOSH is an open-source tool chain for release engineering, deployment, and lifecycle management of large-scale distributed se… | 99 | 2079 | active |
| Kubefirst Kubefirst is a CLI that provisions instant GitOps-based Kubernetes platforms, integrating tools like Argo CD, Atlantis, Vault, and external… | 69 | 2061 | active |
| ine-labs/AWSGoat AWSGoat is a deliberately vulnerable AWS infrastructure deployed via Terraform, featuring OWASP Top 10 web vulnerabilities and cloud miscon… | 39 | 2055 | active |
| anomalyco/ion SST (formerly under anomalyco/ion) is a framework for building full-stack apps on your own cloud infrastructure, with a CLI and infrastruct… | 10 | 1992 | active |
| opencmit/pangee-cluster PangeeCluster is a self-hosted web application providing a graphical interface for offline installation, maintenance, and upgrading of high… | 60 | 1970 | active |
| elitak/nixos-infect A shell script that replaces the existing operating system on a freshly provisioned VPS or cloud host with NixOS. It supports many provider… | 62 | 1941 | active |
| Azure/aztfexport Azure Export for Terraform (aztfexport) is a CLI tool that imports existing Azure resources into Terraform state and generates the correspo… | 90 | 1916 | active |
| valqore/valqore Valqore is a deterministic infrastructure governance engine that scans Kubernetes manifests, Terraform, Helm, and cloud resources against 1… | 77 | 1900 | active |
| dmacvicar/terraform-provider-libvirt A Terraform provider that provisions and manages virtualization resources (virtual machines, storage pools, volumes, and networks) on Linux… | 94 | 1896 | active |
| yonahd/kor Kor is a Go CLI tool that discovers unused (orphaned) Kubernetes resources such as ConfigMaps, Secrets, Services, Roles, PVCs, and many mor… | 93 | 1877 | active |
| ZSvirt/zsvirt ZSvirt is an open-source IaaS virtualization platform that brings ZStack's enterprise ZSphere engine to the community, providing a control … | 56 | 1855 | active |
| Serverless-Devs/Serverless-Devs Serverless Devs is an open-source serverless developer toolchain and CLI (installed via npm as @serverless-devs/s) for managing the full li… | 60 | 1832 | active |
| towardsthecloud/cloudburn CloudBurn is an open-source AWS cost policy engine distributed as a CLI, SDK, and GitHub App. It runs deterministic cost rules against Terr… | 93 | 1789 | active |
| Terraform Kubernetes Provider The official Terraform provider plugin for Kubernetes, maintained by HashiCorp, enabling full lifecycle management of Kubernetes resources … | 95 | 1722 | active |
| flux-iac/tofu-controller Tofu Controller is a Kubernetes controller that reconciles OpenTofu and Terraform resources through Flux in a GitOps workflow. It supports … | 92 | 1714 | active |
| Radius Radius is an open-source, cloud-native application platform that lets developers model an entire application—its services and the infrastru… | 99 | 1668 | active |
| Alchemy Alchemy is a TypeScript-native Infrastructure-as-Code library for defining cloud resources (e.g., Cloudflare Workers, R2 buckets, Durable O… | 80 | 1660 | active |
| hashicorp/setup-terraform A GitHub Actions JavaScript action that installs a specified version of the Terraform CLI onto the workflow runner and adds it to PATH. It … | 87 | 1594 | active |
| awslabs/diagram-as-code A Go-based CLI tool (awsdac) that generates AWS architecture diagrams from human-readable YAML definitions, following AWS diagram guideline… | 85 | 1585 | active |
| openstack/openstack-ansible OpenStack-Ansible is an official OpenStack project providing Ansible playbooks and roles for deploying production OpenStack clouds from sou… | 77 | 1561 | active |
| openshift/installer The official installer CLI for provisioning OpenShift 4.x Kubernetes clusters across many platforms including AWS, Azure, GCP, bare metal, … | 68 | 1559 | active |
| hashicorp/terraform-mcp-server An official Model Context Protocol (MCP) server from HashiCorp that integrates with the Terraform Registry and HCP Terraform APIs. It enabl… | 85 | 1550 | active |
| Sceptre/sceptre Sceptre is a Python CLI tool that drives AWS CloudFormation, automating stack creation, dependency resolution, and multi-account/region dep… | 74 | 1532 | active |
| kubermatic/kubeone KubeOne is an open-source CLI tool by Kubermatic that automates the full lifecycle of Kubernetes clusters—provisioning, upgrading, repairin… | 99 | 1527 | active |
| pluralsh/plural Plural is an enterprise Kubernetes management platform that provides fleet-scale GitOps deployments, infrastructure-as-code management, and… | 93 | 1506 | active |
| mkubaczyk/helmsman Helmsman is a Helm Charts as Code tool that lets you describe the desired state of Kubernetes applications in a declarative TOML or YAML fi… | 83 | 1498 | active |
| org-formation/org-formation-cli AWS Organization Formation is an Infrastructure as Code CLI tool for managing AWS Organizations, letting you define accounts, OUs, and serv… | 48 | 1490 | active |
| swoodford/aws A collection of bash shell scripts for automating AWS tasks using the AWS CLI and jq. It simplifies repetitive DevOps operations across ser… | 57 | 1442 | active |
| inlets A Kubernetes operator that gives local clusters (kind, k3d, minikube) real public TCP LoadBalancer IPs by provisioning cloud VMs running in… | 88 | 1439 | active |
| poseidon/matchbox Matchbox is a Go service that matches bare-metal machines to provisioning profiles via PXE/iPXE network boot, serving kernel, initrd, iPXE,… | 66 | 1428 | active |
| cloudflare/cf-terraforming A command line utility that fetches existing Cloudflare resources via the Cloudflare API and generates Terraform HCL configurations for the… | 92 | 1408 | active |
| grafana/grafana-operator A Kubernetes operator that installs and manages Grafana instances, dashboards, datasources, and other Grafana resources via custom resource… | 97 | 1390 | active |
| awless awless is a powerful CLI for managing Amazon Web Services with a small, hierarchical command surface. It offers a templating language for c… | 23 | 4953 | maintenance |
| pipe-cd/pipecd PipeCD is a GitOps-style continuous delivery platform that provides a unified deployment and operations experience for applications across … | 96 | 1358 | active |
| awslabs/aws-solutions-constructs AWS Solutions Constructs is an open-source extension of the AWS CDK that provides multi-service, well-architected patterns for defining clo… | 97 | 1357 | active |
page 1 / 3 next →