Open-source infrastructure-as-code software
241 open-source libraries, tools and applications tagged infrastructure-as-code, ranked by how closely infrastructure-as-code is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
241 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| cloudflare/terraform-provider-cloudflare The official Terraform provider plugin for Cloudflare, letting users manage Cloudflare resources (zones, DNS records, load balancers, WAF r… | 98 | 1344 | active |
| runs-on/runs-on RunsOn is a self-hosted GitHub Actions runner control plane for AWS that launches a fresh, ephemeral EC2 instance for every CI job, deploye… | 91 | 1339 | active |
| KusionStack/kusion Kusion is an intent-driven platform orchestrator for building Internal Developer Platforms (IDPs), written in Go and a CNCF Sandbox project… | 79 | 1323 | active |
| stategraph/stategraph Stategraph is a platform that replaces Terraform/OpenTofu's file-based state with a Postgres-backed dependency graph, enabling resource-lev… | 84 | 1285 | active |
| minamijoyo/tfmigrate tfmigrate is a CLI tool for safely migrating Terraform and OpenTofu state files in a GitOps-friendly, declarative way. It lets you write st… | 70 | 1277 | active |
| schemahero/schemahero SchemaHero is a database schema migration tool that lets you define table schemas declaratively in YAML and generates the SQL needed to rec… | 96 | 1273 | active |
| pry0cc/axiom Axiom is a dynamic infrastructure framework for spinning up disposable multi-cloud instances pre-loaded with security scanning tools like n… | 23 | 4429 | maintenance |
| sl1pm4t/k2tf k2tf is a command-line tool that converts Kubernetes API objects from YAML manifests into Terraform HCL configuration. The generated .tf fi… | 44 | 1232 | active |
| aws-ia/taskcat TaskCat is a Python-based testing framework and CLI tool for AWS CloudFormation templates. It deploys templates across multiple AWS regions… | 76 | 1204 | active |
| integrations/terraform-provider-github A Terraform provider plugin that manages GitHub resources such as repositories, teams, branch protections, actions secrets, rulesets, and w… | 94 | 1190 | active |
| layer5io/layer5 Layer5 is the umbrella repository and website for Layer5's cloud native infrastructure management projects, most notably Meshery (a CNCF co… | 77 | 1143 | active |
| kayac/ecspresso ecspresso is a CLI deployment tool for Amazon ECS that manages services and task definitions as code in JSON, YAML, or Jsonnet files. It su… | 98 | 1135 | active |
| kubernetes-sigs/aws-ebs-csi-driver The Amazon EBS Container Storage Interface (CSI) driver implements the CSI specification so container orchestrators, primarily Kubernetes, … | 96 | 1135 | active |
| Itamae Itamae is a simple and lightweight configuration management tool for Ruby, inspired by Chef but with a simpler, Chef-like DSL that is not c… | 84 | 1134 | stable |
| GoogleCloudPlatform/cloud-foundation-toolkit Google's Cloud Foundation Toolkit provides production-ready Terraform blueprints encoding GCP best practices, plus a CLI for creating and m… | 92 | 1132 | active |
| argoproj-labs/argocd-autopilot Argo CD Autopilot is a Go-based CLI tool that provides an opinionated way to install and manage Argo CD itself using GitOps. It scaffolds a… | 48 | 1130 | active |
| aws/copilot-cli AWS Copilot CLI is an open-source command-line tool for developers to build, release, and operate production-ready containerized applicatio… | 10 | 3732 | maintenance |
| hashicorp/terraform-provider-helm The official Terraform provider for Helm, written in Go, enabling installation and management of Helm chart releases on Kubernetes clusters… | 90 | 1076 | active |
| GoogleCloudPlatform/k8s-config-connector GCP Config Connector is a Kubernetes add-on that lets you manage Google Cloud resources (e.g., Cloud Spanner, Cloud Storage) declaratively … | 100 | 1072 | active |
| DBCDK/morph Morph is a CLI tool for managing and deploying NixOS host configurations, acting as a wrapper around nix-build, nix copy, and switch-to-con… | 61 | 1064 | active |
| env0/terratag Terratag is a CLI tool that automatically applies tags or labels across an entire set of Terraform/OpenTofu (and Terragrunt) files, targeti… | 98 | 1058 | active |
| cloudposse/geodesic Geodesic is a Docker-based Linux toolbox container preloaded with a DevOps toolchain (kubectl, helm, terraform, aws cli, etc.) to give team… | 84 | 1051 | active |
| pgplex/pgschema pgschema is a Go CLI tool that brings Terraform-style declarative schema migration to PostgreSQL: dump the current schema, edit the desired… | 83 | 1051 | active |
| serverless-operations/serverless-step-functions A Serverless Framework plugin that adds support for defining and deploying AWS Step Functions state machines via serverless.yml. It support… | 90 | 1048 | active |
| nix-community/srvos SrvOS is a collection of opinionated, shareable NixOS modules and profiles optimized for servers, maintained by the nix-community and Numti… | 75 | 1014 | stable |
| controlplaneio/simulator A distributed systems and infrastructure security training platform that provisions a Kubernetes cluster in your AWS account and runs scena… | 23 | 1007 | active |
| snyk/driftctl driftctl is a free and open-source CLI that scans cloud providers (AWS, GitHub, Azure, GCP), maps resources against Terraform code, and det… | 66 | 2662 | maintenance |
| mitchellh/vagrant-aws A Vagrant plugin that adds an AWS provider, letting Vagrant boot, SSH into, and provision EC2 and VPC instances. It supports multi-region c… | 10 | 2586 | maintenance |
| Serverspec Serverspec is a Ruby library for writing RSpec tests that verify servers are configured correctly, executing commands locally, via SSH, Win… | 64 | 2520 | maintenance |
| pytest-dev/pytest-testinfra Testinfra is a pytest plugin for writing unit tests in Python that verify the actual state of servers managed by tools like Ansible, Salt, … | 72 | 2478 | maintenance |
| NixOS/nixops NixOps is a command-line tool for declaratively deploying NixOS machines to networks or cloud providers such as AWS, Hetzner, and GCE. It s… | 55 | 2201 | maintenance |
| adammck/terraform-inventory A small Go CLI application that generates a dynamic Ansible inventory from a Terraform state file. It lets you provision infrastructure wit… | 45 | 1843 | maintenance |
| devopsgroup-io/vagrant-digitalocean A Vagrant provider plugin that manages DigitalOcean Droplets (virtual machines) directly from a Vagrantfile. It supports creating, destroyi… | 23 | 1708 | maintenance |
| kubicorn/kubicorn Kubicorn is a free and open source Go project for creating, managing, snapshotting, and scaling Kubernetes cluster infrastructure in the pu… | 23 | 1681 | maintenance |
| rubber/rubber Rubber is a Capistrano/Rails plugin that automates deploying, managing, and scaling multi-instance Rails applications across providers like… | 32 | 1450 | maintenance |
| Shopify/krane Krane is a Ruby command-line tool from Shopify that deploys changes to a Kubernetes namespace and reports a clear pass/fail result with deb… | 66 | 1419 | maintenance |
| iann0036/AWSConsoleRecorder A browser extension for Chrome and Firefox that records actions performed in the AWS Management Console and generates equivalent code. It o… | 10 | 1418 | maintenance |
| krisnova/naml NAML is a Go library and CLI tool that replaces Kubernetes YAML manifests with Go code, letting developers define, compile, and deploy Kube… | 23 | 1254 | maintenance |
| kudobuilder/kudo KUDO (Kubernetes Universal Declarative Operator) is a framework and CLI for building production-grade Kubernetes operators declaratively, c… | 23 | 1217 | maintenance |
| nat-henderson/terraform-provider-dominos A Terraform provider plugin that lets you order Domino's Pizza through HashiCorp Terraform configuration files. It defines data sources for… | 32 | 1181 | maintenance |
| JetBrains/kotless Kotless is a Kotlin serverless framework that generates Terraform deployment code directly from application code, supporting its own DSL as… | 23 | 1169 | maintenance |
| hashivim/vim-terraform A Vim plugin providing Terraform integration, including a :Terraform command with tab completion, syntax highlighting for HCL/Terraform fil… | 39 | 1106 | maintenance |
| gaia-app/gaia Gaia is a self-hosted web application providing a UI for Terraform modules and self-service infrastructure. It lets teams import modules fr… | 23 | 1081 | maintenance |
| lework/kainstall A single-file shell script that installs Kubernetes high-availability clusters based on kubeadm with one command, including server initiali… | 23 | 1056 | maintenance |
| mobile-nixos/mobile-nixos Mobile NixOS is a Nix-based layer that lets you build and configure NixOS for mobile devices such as phones and tablets. It provides device… | 70 | 1370 | experimental |
| GoogleCloudPlatform/terraformer Terraformer is a Go CLI tool that generates Terraform configuration (tf/) and tfstate files from existing cloud infrastructure, effectively… | 10 | 14543 | abandoned |
| tenable/terrascan Terrascan is a static code analyzer for Infrastructure as Code that detects compliance and security violations across Terraform, CloudForma… | 10 | 5214 | abandoned |
| hashicorp/terraform-cdk CDK for Terraform (CDKTF) is a framework for defining infrastructure as code using general-purpose programming languages (TypeScript, Pytho… | 10 | 5066 | abandoned |
| KubeOperator KubeOperator is an open-source lightweight Kubernetes distribution that helps enterprises plan (Day 0), deploy (Day 1), and operate (Day 2)… | 10 | 4970 | abandoned |
| Waypoint HashiCorp Waypoint is a Go-based tool that lets developers define their application build, deploy, and release lifecycle as code, with out-… | 10 | 4720 | abandoned |
| dtan4/terraforming Terraforming is a Ruby CLI gem that exports existing AWS resources into Terraform configuration files (.tf) and state files (.tfstate). It … | 10 | 4250 | abandoned |
| roboll/helmfile Helmfile is a declarative CLI tool for deploying and managing Kubernetes Helm charts, letting teams define chart releases in a single YAML … | 23 | 4032 | abandoned |
| rancher/k3os k3OS is a minimal Linux distribution purpose-built to run Kubernetes via k3s, designed so the entire OS is managed and upgraded through kub… | 10 | 3477 | abandoned |
| kubernetes-retired/external-storage A retired Kubernetes incubator project containing community-maintained out-of-tree dynamic PersistentVolume provisioners and a helper libra… | 10 | 2688 | abandoned |
| docker-archive/deploykit InfraKit is a Go-based toolkit for declarative, self-healing infrastructure orchestration, built from small pluggable components that activ… | 10 | 2253 | abandoned |
| koding/koding Koding is an open-source development platform that orchestrates cloud-based dev environments, letting teams define, share, and spin up full… | 10 | 2177 | abandoned |
| Ansible Container A deprecated CLI tool that built Docker images and orchestrated container deployment using Ansible playbooks instead of Dockerfiles. It man… | 10 | 2161 | abandoned |
| jorgebastida/gordon Gordon is a Python CLI tool for creating, wiring, and deploying AWS Lambda functions using CloudFormation. It supports multiple runtimes, l… | 32 | 2027 | abandoned |
| systeminit/si System Initiative is an AI-native infrastructure automation platform where AI agents discover infrastructure, propose changes, and execute … | 10 | 1806 | abandoned |
| joedicastro/vps-comparison A Python and Ansible-based tool that runs automated benchmark tests across VPS providers and publishes reproducible comparison results. It … | 32 | 1433 | abandoned |
| briefercloud/layerform Layerform is a Terraform wrapper CLI that lets engineers build reusable environment stacks from plain .tf files by stacking infrastructure … | 10 | 1207 | abandoned |
| ksonnet ksonnet is a CLI-supported framework for writing, sharing, and deploying Kubernetes application manifests, using Jsonnet to generate and cu… | 10 | 1157 | abandoned |
| klothoplatform/klotho Klotho is an open-source CLI tool that transforms plain application code into cloud-native code using in-code annotations, generating infra… | 48 | 1143 | abandoned |
| newcontext-oss/kitchen-terraform A set of Test Kitchen plugins that enable converging Terraform configurations and verifying the resulting infrastructure with InSpec contro… | 10 | 1123 | abandoned |
| kubernetes-retired/kube-aws kube-aws is a command-line tool for declaratively creating, updating, and destroying Kubernetes clusters on AWS using CloudFormation. The p… | 10 | 1111 | abandoned |
| Azure Container Service AKS Engine is a deprecated command-line tool that generated ARM templates and provisioned self-managed Kubernetes clusters on Azure. The re… | 10 | 1018 | abandoned |
| Kubernetes Kubernetes (K8s) is an open-source container orchestration system for automating the deployment, scaling, and management of containerized a… | 94 | 128491 | stable |
| Ansible Ansible is an open‑source IT automation engine that uses simple, human‑readable YAML playbooks to configure systems, deploy applications, a… | 94 | 70871 | active |
| Portainer Portainer Community Edition is a lightweight, self-hosted web UI and API for managing Docker, Docker Swarm, Kubernetes, and Azure ACI conta… | 92 | 38562 | stable |
| Kestra Kestra is an open-source, event-driven orchestration and scheduling platform for data, AI, and infrastructure workflows, written in Java. I… | 95 | 29837 | stable |
| JHipster JHipster is a Yeoman-based development platform that scaffolds complete full-stack web applications and microservice architectures, combini… | 94 | 22465 | stable |
| Nomad HashiCorp Nomad is a flexible, single-binary workload orchestrator that deploys and manages containers, non-containerized applications, bat… | 94 | 17012 | stable |
| semaphoreui/semaphore Semaphore UI is an open-source, self-hosted web UI and API for running Ansible playbooks, Terraform/OpenTofu/Terragrunt, Bash, PowerShell, … | 92 | 14201 | active |
| Encore Encore is an open-source infrastructure SDK and backend framework for TypeScript and Go that lets developers declare resources like databas… | 95 | 12446 | active |
| ubicloud/ubicloud Ubicloud is an open-source IaaS cloud platform that provides elastic compute (VMs), block storage, networking, load balancing, managed Post… | 76 | 12316 | active |
| Meshery Meshery is an open-source, self-service engineering platform for collaboratively designing, deploying, and managing Kubernetes and cloud na… | 95 | 12014 | active |
| awslabs/mcp A suite of open-source Model Context Protocol (MCP) servers from AWS Labs that expose AWS services, documentation, and best practices to LL… | 84 | 9794 | active |
| bitnami/sealed-secrets A Kubernetes controller plus the kubeseal CLI that lets you encrypt Kubernetes Secrets into one-way encrypted SealedSecrets that are safe t… | 97 | 9300 | active |
| Checkov Checkov is a static code analysis tool for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, and more) that … | 94 | 9060 | stable |
| HariSekhon/DevOps-Bash-tools A collection of 1200+ DevOps Bash scripts covering cloud platforms (AWS, GCP, Azure), Kubernetes, Docker, CI/CD systems, databases, and pac… | 67 | 8430 | active |
| webiny/webiny-js Webiny is an open-source, self-hosted content platform built as a TypeScript framework that runs on AWS serverless infrastructure (Lambda, … | 97 | 8047 | active |
| Boilerplates A CLI tool and template library for creating reusable infrastructure templates and rendering them into configurable workloads for homelabs … | 89 | 7984 | active |
| alexellis/k3sup k3sup is a lightweight Go CLI tool that bootstraps a K3s Kubernetes cluster on any local or remote VM over SSH, getting you a working KUBEC… | 86 | 7436 | active |
| FullStackHero .NET Starter Kit A production-grade .NET 10 starter kit template combining a modular-monolith Web API (vertical slice architecture) with two React 19 front-… | 82 | 6814 | active |
| Optimism Optimism is the open-source OP Stack, a modular software stack for deploying Ethereum Layer 2 optimistic rollup blockchains such as OP Main… | 95 | 6481 | active |
| cloud-custodian/cloud-custodian Cloud Custodian (c7n) is a Python-based stateless rules engine for managing public cloud accounts and resources via YAML policy DSLs with f… | 95 | 6088 | stable |
| alexcasalboni/aws-lambda-power-tuning AWS Lambda Power Tuning is an open-source tool built on AWS Step Functions that benchmarks Lambda functions across different memory configu… | 75 | 6068 | active |
| pyinfra pyinfra is an agentless infrastructure automation tool that turns Python code into shell commands and executes them over SSH, locally, or a… | 89 | 6013 | active |
| TFLint TFLint is a pluggable linter for Terraform that finds possible errors, deprecated syntax, and unused declarations, and enforces best practi… | 89 | 5827 | active |
| AidLux (AidLearning) AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 63 | 5812 | active |
| winglang/wing Wing is an open-source, cloud-oriented programming language that unifies infrastructure definitions and application runtime code in a singl… | 78 | 5402 | active |
| Azure/azure-powershell The official Microsoft Azure PowerShell module (Az) providing cmdlets to develop, deploy, and administer Azure resources. It supports authe… | 99 | 4806 | active |
| ministackorg/ministack MiniStack is a free, MIT-licensed local AWS emulator that mimics 60+ AWS services (S3, SQS, SNS, DynamoDB, Lambda, EC2, RDS, ElastiCache, E… | 77 | 4774 | active |
| werf werf is a CNCF Sandbox CLI tool that implements full-cycle CI/CD for Kubernetes, integrating with your CI system to build, publish, test, a… | 93 | 4727 | stable |
| Azure/azure-cli Azure CLI is Microsoft's official cross-platform command-line interface for managing Azure resources. It provides the `az` command with tab… | 99 | 4651 | stable |
| kubernetes-sigs/aws-load-balancer-controller A Kubernetes controller that manages AWS Elastic Load Balancers for a cluster. It provisions Application Load Balancers for Ingress resourc… | 99 | 4343 | stable |
| nixos-anywhere nixos-anywhere is a CLI tool that installs NixOS on remote machines over SSH in a single unattended command. It handles disk partitioning v… | 76 | 3455 | active |
| google/osv.dev OSV (Open Source Vulnerabilities) is Google's open, distributed vulnerability database and triage service that aggregates security advisori… | 91 | 2973 | stable |
| Cloudpods Cloudpods is an open-source, Golang-based cloud-native unified multi/hybrid-cloud platform ('a cloud on clouds') that manages on-premise KV… | 77 | 2958 | active |
| CanineHQ/canine Canine is an open-source, self-hosted PaaS that turns any Kubernetes cluster into a Heroku-like deployment platform. It provides git-push d… | 68 | 2938 | active |