function: infrastructure-as-code
242 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| cloudflare/terraform-provider-cloudflare The official Terraform provider plugin for Cloudflare, letting users manage Cloudflare resources (zones, DNS records, load balancers, WAF r… | 99 | 1318 | active |
| KusionStack/kusion Kusion is an intent-driven platform orchestrator for building Internal Developer Platforms (IDPs), written in Go and a CNCF Sandbox project… | 79 | 1317 | active |
| runs-on/runs-on RunsOn is a self-hosted GitHub Actions runner control plane for AWS that launches a fresh, ephemeral EC2 instance for every CI job, deploye… | 93 | 1300 | active |
| stategraph/stategraph Stategraph is a platform that replaces Terraform/OpenTofu's file-based state with a Postgres-backed dependency graph, enabling resource-lev… | 86 | 1279 | active |
| minamijoyo/tfmigrate tfmigrate is a CLI tool for safely migrating Terraform and OpenTofu state files in a GitOps-friendly, declarative way. It lets you write st… | 76 | 1278 | active |
| pry0cc/axiom Axiom is a dynamic infrastructure framework for spinning up disposable multi-cloud instances pre-loaded with security scanning tools like n… | 23 | 4415 | maintenance |
| sl1pm4t/k2tf k2tf is a command-line tool that converts Kubernetes API objects from YAML manifests into Terraform HCL configuration. The generated .tf fi… | 48 | 1233 | active |
| aws-ia/taskcat TaskCat is a Python-based testing framework and CLI tool for AWS CloudFormation templates. It deploys templates across multiple AWS regions… | 82 | 1205 | active |
| integrations/terraform-provider-github A Terraform provider plugin that manages GitHub resources such as repositories, teams, branch protections, actions secrets, rulesets, and w… | 97 | 1162 | active |
| Alchemy Alchemy is a TypeScript-native Infrastructure-as-Code library for defining cloud resources (e.g., Cloudflare Workers, R2 buckets, Durable O… | 80 | 1162 | active |
| schemahero/schemahero SchemaHero is a database schema migration tool that lets you define table schemas declaratively in YAML and generates the SQL needed to rec… | 98 | 1148 | active |
| kubernetes-sigs/aws-ebs-csi-driver The Amazon EBS Container Storage Interface (CSI) driver implements the CSI specification so container orchestrators, primarily Kubernetes, … | 95 | 1135 | active |
| itamae-kitchen/itamae Itamae is a simple and lightweight configuration management tool for Ruby, inspired by Chef but with a simpler, Chef-like DSL that is not c… | 86 | 1132 | stable |
| argoproj-labs/argocd-autopilot Argo CD Autopilot is a Go-based CLI tool that provides an opinionated way to install and manage Argo CD itself using GitOps. It scaffolds a… | 54 | 1125 | active |
| GoogleCloudPlatform/cloud-foundation-toolkit Google's Cloud Foundation Toolkit provides production-ready Terraform blueprints encoding GCP best practices, plus a CLI for creating and m… | 94 | 1123 | active |
| kayac/ecspresso ecspresso is a CLI deployment tool for Amazon ECS that manages services and task definitions as code in JSON, YAML, or Jsonnet files. It su… | 96 | 1117 | active |
| layer5io/layer5 Layer5 is the umbrella repository and website for Layer5's cloud native infrastructure management projects, most notably Meshery (a CNCF co… | 77 | 1115 | active |
| aws/copilot-cli AWS Copilot CLI is an open-source command-line tool for developers to build, release, and operate production-ready containerized applicatio… | 10 | 3736 | maintenance |
| hashicorp/terraform-provider-helm The official Terraform provider for Helm, written in Go, enabling installation and management of Helm chart releases on Kubernetes clusters… | 87 | 1077 | active |
| GoogleCloudPlatform/k8s-config-connector GCP Config Connector is a Kubernetes add-on that lets you manage Google Cloud resources (e.g., Cloud Spanner, Cloud Storage) declaratively … | 99 | 1062 | active |
| DBCDK/morph Morph is a CLI tool for managing and deploying NixOS host configurations, acting as a wrapper around nix-build, nix copy, and switch-to-con… | 65 | 1057 | active |
| env0/terratag Terratag is a CLI tool that automatically applies tags or labels across an entire set of Terraform/OpenTofu (and Terragrunt) files, targeti… | 82 | 1055 | active |
| cloudposse/geodesic Geodesic is a Docker-based Linux toolbox container preloaded with a DevOps toolchain (kubectl, helm, terraform, aws cli, etc.) to give team… | 86 | 1052 | active |
| serverless-operations/serverless-step-functions A Serverless Framework plugin that adds support for defining and deploying AWS Step Functions state machines via serverless.yml. It support… | 96 | 1045 | active |
| pgplex/pgschema pgschema is a Go CLI tool that brings Terraform-style declarative schema migration to PostgreSQL: dump the current schema, edit the desired… | 86 | 1023 | active |
| nix-community/srvos SrvOS is a collection of opinionated, shareable NixOS modules and profiles optimized for servers, maintained by the nix-community and Numti… | 77 | 1005 | stable |
| controlplaneio/simulator A distributed systems and infrastructure security training platform that provisions a Kubernetes cluster in your AWS account and runs scena… | 23 | 1000 | active |
| snyk/driftctl driftctl is a free and open-source CLI that scans cloud providers (AWS, GitHub, Azure, GCP), maps resources against Terraform code, and det… | 66 | 2660 | maintenance |
| mitchellh/vagrant-aws A Vagrant plugin that adds an AWS provider, letting Vagrant boot, SSH into, and provision EC2 and VPC instances. It supports multi-region c… | 10 | 2587 | maintenance |
| mizzy/serverspec Serverspec is a Ruby library for writing RSpec tests that verify servers are configured correctly, executing commands locally, via SSH, Win… | 31 | 2520 | maintenance |
| pytest-dev/pytest-testinfra Testinfra is a pytest plugin for writing unit tests in Python that verify the actual state of servers managed by tools like Ansible, Salt, … | 76 | 2477 | maintenance |
| NixOS/nixops NixOps is a command-line tool for declaratively deploying NixOS machines to networks or cloud providers such as AWS, Hetzner, and GCE. It s… | 59 | 2191 | maintenance |
| adammck/terraform-inventory A small Go CLI application that generates a dynamic Ansible inventory from a Terraform state file. It lets you provision infrastructure wit… | 49 | 1840 | maintenance |
| devopsgroup-io/vagrant-digitalocean A Vagrant provider plugin that manages DigitalOcean Droplets (virtual machines) directly from a Vagrantfile. It supports creating, destroyi… | 23 | 1709 | maintenance |
| kubicorn/kubicorn Kubicorn is a free and open source Go project for creating, managing, snapshotting, and scaling Kubernetes cluster infrastructure in the pu… | 23 | 1682 | maintenance |
| rubber/rubber Rubber is a Capistrano/Rails plugin that automates deploying, managing, and scaling multi-instance Rails applications across providers like… | 32 | 1451 | maintenance |
| iann0036/AWSConsoleRecorder A browser extension for Chrome and Firefox that records actions performed in the AWS Management Console and generates equivalent code. It o… | 10 | 1420 | maintenance |
| Shopify/krane Krane is a Ruby command-line tool from Shopify that deploys changes to a Kubernetes namespace and reports a clear pass/fail result with deb… | 53 | 1417 | maintenance |
| krisnova/naml NAML is a Go library and CLI tool that replaces Kubernetes YAML manifests with Go code, letting developers define, compile, and deploy Kube… | 23 | 1255 | maintenance |
| kudobuilder/kudo KUDO (Kubernetes Universal Declarative Operator) is a framework and CLI for building production-grade Kubernetes operators declaratively, c… | 23 | 1215 | maintenance |
| nat-henderson/terraform-provider-dominos A Terraform provider plugin that lets you order Domino's Pizza through HashiCorp Terraform configuration files. It defines data sources for… | 32 | 1180 | maintenance |
| JetBrains/kotless Kotless is a Kotlin serverless framework that generates Terraform deployment code directly from application code, supporting its own DSL as… | 23 | 1168 | maintenance |
| hashivim/vim-terraform A Vim plugin providing Terraform integration, including a :Terraform command with tab completion, syntax highlighting for HCL/Terraform fil… | 43 | 1109 | maintenance |
| gaia-app/gaia Gaia is a self-hosted web application providing a UI for Terraform modules and self-service infrastructure. It lets teams import modules fr… | 23 | 1080 | maintenance |
| lework/kainstall A single-file shell script that installs Kubernetes high-availability clusters based on kubeadm with one command, including server initiali… | 23 | 1057 | maintenance |
| mobile-nixos/mobile-nixos Mobile NixOS is a Nix-based layer that lets you build and configure NixOS for mobile devices such as phones and tablets. It provides device… | 74 | 1355 | experimental |
| GoogleCloudPlatform/terraformer Terraformer is a Go CLI tool that generates Terraform configuration (tf/) and tfstate files from existing cloud infrastructure, effectively… | 10 | 14559 | abandoned |
| tenable/terrascan Terrascan is a static code analyzer for Infrastructure as Code that detects compliance and security violations across Terraform, CloudForma… | 10 | 5211 | abandoned |
| hashicorp/terraform-cdk CDK for Terraform (CDKTF) is a framework for defining infrastructure as code using general-purpose programming languages (TypeScript, Pytho… | 10 | 5074 | abandoned |
| KubeOperator/KubeOperator KubeOperator is an open-source lightweight Kubernetes distribution that helps enterprises plan (Day 0), deploy (Day 1), and operate (Day 2)… | 10 | 4978 | abandoned |
| hashicorp/waypoint HashiCorp Waypoint is a Go-based tool that lets developers define their application build, deploy, and release lifecycle as code, with out-… | 10 | 4720 | abandoned |
| dtan4/terraforming Terraforming is a Ruby CLI gem that exports existing AWS resources into Terraform configuration files (.tf) and state files (.tfstate). It … | 10 | 4255 | abandoned |
| roboll/helmfile Helmfile is a declarative CLI tool for deploying and managing Kubernetes Helm charts, letting teams define chart releases in a single YAML … | 23 | 4033 | abandoned |
| rancher/k3os k3OS is a minimal Linux distribution purpose-built to run Kubernetes via k3s, designed so the entire OS is managed and upgraded through kub… | 10 | 3478 | abandoned |
| kubernetes-retired/external-storage A retired Kubernetes incubator project containing community-maintained out-of-tree dynamic PersistentVolume provisioners and a helper libra… | 10 | 2690 | abandoned |
| docker-archive/deploykit InfraKit is a Go-based toolkit for declarative, self-healing infrastructure orchestration, built from small pluggable components that activ… | 10 | 2252 | abandoned |
| koding/koding Koding is an open-source development platform that orchestrates cloud-based dev environments, letting teams define, share, and spin up full… | 10 | 2174 | abandoned |
| ansible/ansible-container A deprecated CLI tool that built Docker images and orchestrated container deployment using Ansible playbooks instead of Dockerfiles. It man… | 10 | 2163 | abandoned |
| jorgebastida/gordon Gordon is a Python CLI tool for creating, wiring, and deploying AWS Lambda functions using CloudFormation. It supports multiple runtimes, l… | 32 | 2026 | abandoned |
| systeminit/si System Initiative is an AI-native infrastructure automation platform where AI agents discover infrastructure, propose changes, and execute … | 10 | 1808 | abandoned |
| joedicastro/vps-comparison A Python and Ansible-based tool that runs automated benchmark tests across VPS providers and publishes reproducible comparison results. It … | 32 | 1432 | abandoned |
| briefercloud/layerform Layerform is a Terraform wrapper CLI that lets engineers build reusable environment stacks from plain .tf files by stacking infrastructure … | 10 | 1207 | abandoned |
| ksonnet/ksonnet ksonnet is a CLI-supported framework for writing, sharing, and deploying Kubernetes application manifests, using Jsonnet to generate and cu… | 10 | 1157 | abandoned |
| klothoplatform/klotho Klotho is an open-source CLI tool that transforms plain application code into cloud-native code using in-code annotations, generating infra… | 51 | 1146 | abandoned |
| newcontext-oss/kitchen-terraform A set of Test Kitchen plugins that enable converging Terraform configurations and verifying the resulting infrastructure with InSpec contro… | 10 | 1121 | abandoned |
| kubernetes-retired/kube-aws kube-aws is a command-line tool for declaratively creating, updating, and destroying Kubernetes clusters on AWS using CloudFormation. The p… | 10 | 1111 | abandoned |
| AKS Engine AKS Engine is a deprecated command-line tool that generated ARM templates and provisioned self-managed Kubernetes clusters on Azure. The re… | 10 | 1021 | abandoned |
| kubernetes/kubernetes Kubernetes (K8s) is an open-source container orchestration system for automating the deployment, scaling, and management of containerized a… | 95 | 125208 | stable |
| portainer/portainer Portainer Community Edition is a lightweight, self-hosted web UI and API for managing Docker, Docker Swarm, Kubernetes, and Azure ACI conta… | 95 | 38350 | stable |
| Trivy Trivy is an all-in-one open-source security scanner that finds vulnerabilities (CVEs), IaC misconfigurations, secrets, and software license… | 98 | 37636 | stable |
| kestra-io/kestra Kestra is an open-source, event-driven orchestration and scheduling platform for data, AI, and infrastructure workflows, written in Java. I… | 95 | 27933 | stable |
| jhipster/generator-jhipster JHipster is a Yeoman-based development platform that scaffolds complete full-stack web applications and microservice architectures, combini… | 93 | 22446 | stable |
| hashicorp/nomad HashiCorp Nomad is a flexible, single-binary workload orchestrator that deploys and manages containers, non-containerized applications, bat… | 94 | 16837 | stable |
| semaphoreui/semaphore Semaphore UI is an open-source, self-hosted web UI and API for running Ansible playbooks, Terraform/OpenTofu/Terragrunt, Bash, PowerShell, … | 95 | 14058 | active |
| encoredev/encore Encore is an open-source infrastructure SDK and backend framework for TypeScript and Go that lets developers declare resources like databas… | 95 | 12307 | active |
| ubicloud/ubicloud Ubicloud is an open-source IaaS cloud platform that provides elastic compute (VMs), block storage, networking, load balancing, managed Post… | 76 | 12254 | active |
| meshery/meshery Meshery is an open-source, self-service engineering platform for collaboratively designing, deploying, and managing Kubernetes and cloud na… | 95 | 11583 | active |
| awslabs/mcp A suite of open-source Model Context Protocol (MCP) servers from AWS Labs that expose AWS services, documentation, and best practices to LL… | 82 | 9641 | active |
| bitnami/sealed-secrets A Kubernetes controller plus the kubeseal CLI that lets you encrypt Kubernetes Secrets into one-way encrypted SealedSecrets that are safe t… | 99 | 9256 | active |
| bridgecrewio/checkov Checkov is a static code analysis tool for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, and more) that … | 95 | 8973 | stable |
| HariSekhon/DevOps-Bash-tools A collection of 1200+ DevOps Bash scripts covering cloud platforms (AWS, GCP, Azure), Kubernetes, Docker, CI/CD systems, databases, and pac… | 67 | 8387 | active |
| webiny/webiny-js Webiny is an open-source, self-hosted content platform built as a TypeScript framework that runs on AWS serverless infrastructure (Lambda, … | 98 | 8031 | active |
| ChristianLempa/boilerplates A CLI tool and template library for creating reusable infrastructure templates and rendering them into configurable workloads for homelabs … | 88 | 7943 | active |
| alexellis/k3sup k3sup is a lightweight Go CLI tool that bootstraps a K3s Kubernetes cluster on any local or remote VM over SSH, getting you a working KUBEC… | 85 | 7424 | active |
| fullstackhero/dotnet-starter-kit A production-grade .NET 10 starter kit template combining a modular-monolith Web API (vertical slice architecture) with two React 19 front-… | 83 | 6734 | active |
| ethereum-optimism/optimism Optimism is the open-source OP Stack, a modular software stack for deploying Ethereum Layer 2 optimistic rollup blockchains such as OP Main… | 95 | 6465 | active |
| cloud-custodian/cloud-custodian Cloud Custodian (c7n) is a Python-based stateless rules engine for managing public cloud accounts and resources via YAML policy DSLs with f… | 90 | 6053 | stable |
| alexcasalboni/aws-lambda-power-tuning AWS Lambda Power Tuning is an open-source tool built on AWS Step Functions that benchmarks Lambda functions across different memory configu… | 76 | 6052 | active |
| pyinfra-dev/pyinfra pyinfra is an agentless infrastructure automation tool that turns Python code into shell commands and executes them over SSH, locally, or a… | 94 | 5965 | active |
| aidlearning/AidLearning-FrameWork AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 70 | 5797 | active |
| terraform-linters/tflint TFLint is a pluggable linter for Terraform that finds possible errors, deprecated syntax, and unused declarations, and enforces best practi… | 93 | 5796 | active |
| winglang/wing Wing is an open-source, cloud-oriented programming language that unifies infrastructure definitions and application runtime code in a singl… | 73 | 5398 | active |
| Azure/azure-powershell The official Microsoft Azure PowerShell module (Az) providing cmdlets to develop, deploy, and administer Azure resources. It supports authe… | 98 | 4773 | active |
| werf werf is a CNCF Sandbox CLI tool that implements full-cycle CI/CD for Kubernetes, integrating with your CI system to build, publish, test, a… | 94 | 4717 | stable |
| Azure/azure-cli Azure CLI is Microsoft's official cross-platform command-line interface for managing Azure resources. It provides the `az` command with tab… | 98 | 4612 | stable |
| kubernetes-sigs/aws-load-balancer-controller A Kubernetes controller that manages AWS Elastic Load Balancers for a cluster. It provisions Application Load Balancers for Ingress resourc… | 98 | 4321 | stable |
| ministackorg/ministack MiniStack is a free, MIT-licensed local AWS emulator that mimics 60+ AWS services (S3, SQS, SNS, DynamoDB, Lambda, EC2, RDS, ElastiCache, E… | 77 | 4140 | active |
| nix-community/nixos-anywhere nixos-anywhere is a CLI tool that installs NixOS on remote machines over SSH in a single unattended command. It handles disk partitioning v… | 80 | 3405 | active |
| yunionio/cloudpods Cloudpods is an open-source, Golang-based cloud-native unified multi/hybrid-cloud platform ('a cloud on clouds') that manages on-premise KV… | 77 | 2935 | active |
| CanineHQ/canine Canine is an open-source, self-hosted PaaS that turns any Kubernetes cluster into a Heroku-like deployment platform. It provides git-push d… | 67 | 2917 | active |