Topics / #infrastructure-as-code

Infrastructure-as-code projects on GitHub

Declaring and provisioning infrastructure as code

As of , the most-starred Infrastructure-as-code projects on GitHub are ansible (71K stars), terraform (49.9K stars) and serverless (46.9K stars). GitHub.Locker tracks 44 Infrastructure-as-code repositories with 823.9K stars combined. The fastest-growing on October 16 was codebase-memory-mcp, with +72 stars in a day.

44Projects
823.9KStars in total
+298Stars in a day
Browse in the catalog →github.com/topics/infrastructure-as-code ↗

Hot right now

Most stars gained in a day · Oct 16

+72

codebase-memory-mcp

DeusData/codebase-memory-mcp · ★ 46.7K

codebase-memory-mcp is a high-performance MCP server that indexes a codebase into a persistent knowledge graph so AI coding agents like Claude Code, Codex, Cursor, and Windsurf can query code structure instead of grepping files.

+34

floci

floci-io/floci · ★ 26.9K

Floci is a free, open-source local AWS emulator: it serves AWS-compatible APIs — S3, SQS, DynamoDB, Lambda, ECS and many more — from your own machine for development, testing, and CI, with no cloud account, auth token, or paid feature gates.

+29

kestra

kestra-io/kestra · ★ 29.7K

Kestra is an open-source, event-driven orchestration platform for building data, AI, and infrastructure workflows. You describe them in declarative YAML and manage everything from a built-in web UI.

+22

trivy

aquasecurity/trivy · ★ 38.5K

Trivy is an all-in-one security scanner that finds vulnerabilities, misconfigurations, secrets, and software licenses across container images, filesystems, git repositories, VM images, and Kubernetes clusters.

The all-time top

44 projects · by stars

  1. #1 · ansible/ansible

    ansible

    Ansible is a radically simple IT automation system for configuration management, application deployment, cloud provisioning, ad-hoc tasks, network automation, and multi-node orchestration.

    71K
  2. #2 · hashicorp/terraform

    terraform

    Terraform is a tool for building, changing, and versioning infrastructure safely and efficiently, letting you describe cloud and on-prem resources in declarative configuration files instead of clicking through consoles.

    49.9K
  3. #3 · serverless/serverless

    serverless

    The Serverless Framework is a tool that lets you build and deploy applications on AWS Lambda and other managed cloud services, so they auto-scale, cost nothing when idle, and need minimal upkeep.

    46.9K
  1. 4

    codebase-memory-mcp

    46.7KDeusData/codebase-memory-mcp · C

    codebase-memory-mcp is a high-performance MCP server that indexes a codebase into a persistent knowledge graph so AI coding agents like Claude Code, Codex, Cursor, and Windsurf can query code structure instead of grepping files.

  2. 5

    trivy

    38.5Kaquasecurity/trivy · Go

    Trivy is an all-in-one security scanner that finds vulnerabilities, misconfigurations, secrets, and software licenses across container images, filesystems, git repositories, VM images, and Kubernetes clusters.

  3. 6

    manifesto

    35.6Kopentofu/manifesto · HTML

    This is the OpenTF Manifesto, a public document and petition opposing HashiCorp's move of Terraform's license away from open source, calling for it to be switched back to a truly open source license.

  4. 7

    opentofu

    30.5Kopentofu/opentofu · Go

    OpenTofu is an open-source tool for declaratively managing cloud infrastructure, letting you build, change, and version infrastructure safely and efficiently.

  5. 8

    algo

    30.4Ktrailofbits/algo · Python

    A set of Ansible scripts that spins up your own personal WireGuard and IPsec VPN server on a cloud provider, using the most secure defaults available.

  6. 9

    kestra

    29.7Kkestra-io/kestra · Java

    Kestra is an open-source, event-driven orchestration platform for building data, AI, and infrastructure workflows. You describe them in declarative YAML and manage everything from a built-in web UI.

  7. 10

    vagrant

    27.2Khashicorp/vagrant · Ruby

    Vagrant is a tool for building and distributing portable development environments that can run locally or in the cloud.

  8. 11

    floci

    26.9Kfloci-io/floci · Java

    Floci is a free, open-source local AWS emulator: it serves AWS-compatible APIs — S3, SQS, DynamoDB, Lambda, ECS and many more — from your own machine for development, testing, and CI, with no cloud account, auth token, or paid feature gates.

  9. 12

    sst

    26.4Kanomalyco/sst · TypeScript

    SST is a tool for building full-stack applications that run on your own cloud infrastructure instead of being locked into a vendor's platform. You define your app's infrastructure in code and deploy it yourself.

  10. 13

    pulumi

    25.8Kpulumi/pulumi · Go

    Pulumi is open source Infrastructure as Code: you write ordinary programming code, and the Pulumi CLI automatically provisions and manages your resources across clouds.

  11. 14

    argo-cd

    24.4Kargoproj/argo-cd · Go

    Argo CD is a declarative GitOps continuous delivery tool for Kubernetes that keeps your cluster state synced with a Git repository.

  12. 15

    kubespray

    18.8Kkubernetes-sigs/kubespray · Jinja

    Kubespray is a set of Ansible playbooks that deploys a production-ready, highly available Kubernetes cluster on cloud VMs or your own bare-metal servers.

  13. 16

    kops

    16.7Kkubernetes/kops · Go

    kOps (Kubernetes Operations) is a tool that creates, upgrades, and manages production-grade, highly available Kubernetes clusters, and also provisions the underlying cloud infrastructure for them.

  14. 17

    packer

    15.8Khashicorp/packer · Go

    Packer is a tool for creating identical machine images for multiple platforms from a single source configuration. It is lightweight, runs on every major OS, and builds images for multiple platforms in parallel.

  15. 18

    salt

    15.7Ksaltstack/salt · Python

    Salt is an event-driven automation engine built on Python to deploy, configure and manage complex IT systems at scale — and keep every component of your infrastructure in a consistent desired state.

  16. 19

    charts

    15.4Khelm/charts · Go

    This was the canonical repository of community-curated Helm charts (stable and incubator) for installing applications on Kubernetes via Helm 2/3. It is now archived and obsolete, superseded by Artifact Hub.

  17. 20

    azure-quickstart-templates

    14.9KAzure/azure-quickstart-templates · Bicep

    This is a large community-contributed collection of Azure Resource Manager (ARM) and Bicep templates for deploying Azure infrastructure, indexed in a searchable template gallery on azure.com.

  18. 21

    terraformer

    14.5KGoogleCloudPlatform/terraformer · Go

    Terraformer is a CLI tool that generates Terraform configuration (tf/json) and state files from infrastructure that already exists in the cloud, essentially reverse-engineering Terraform code from live resources.

  19. 22

    semaphore

    14.3Ksemaphoreui/semaphore · Go

    Semaphore UI is a modern web interface and API for running and managing Ansible playbooks, Terraform/OpenTofu/Terragrunt, PowerShell and Bash scripts, so you don't have to deploy from a terminal anymore.

  20. 23

    aws-cdk

    12.9Kaws/aws-cdk · TypeScript

    AWS CDK is an open-source framework that lets you define AWS cloud infrastructure using real programming languages (TypeScript, Python, Java, .NET, Go) instead of writing raw templates, then provisions it through AWS CloudFormation.

  21. 24

    infracost

    12.6Kinfracost/infracost · Go

    Infracost gives engineers, AI coding agents, and CI/CD pipelines cloud cost estimates and FinOps recommendations for Terraform, Terragrunt, CloudFormation, and AWS CDK before changes are deployed.

  22. 25

    encore

    12.5Kencoredev/encore · Go

    Encore is an open-source backend platform: you declare resources like databases, Pub/Sub and caches directly in code, run the whole system locally with real infrastructure, and deploy into your own AWS or GCP account.

  23. 26

    kustomize

    12.2Kkubernetes-sigs/kustomize · Go

    Kustomize lets you customize raw, template-free Kubernetes YAML files for multiple purposes while leaving the original YAML untouched and usable as is.

  24. 27

    crossplane

    12.2Kcrossplane/crossplane · Go

    Crossplane is a framework for building cloud native control planes without writing code. It orchestrates applications and infrastructure across any environment through a declarative, Kubernetes-style API.

  25. 28

    ansible-examples

    12.1Kansible/ansible-examples · Shell

    A collection of starter Ansible playbooks that demonstrate common features and show how they work together, meant as a learning reference rather than a finished app.

  26. 29

    meshery

    12Kmeshery/meshery · TypeScript

    Meshery is a cloud native management plane that lets you configure, deploy, and visually manage Kubernetes clusters and other cloud native infrastructure across multiple clouds from one place.

  27. 30

    aws-devops-zero-to-hero

    11.6Kiam-veeramalla/aws-devops-zero-to-hero · Python

    A 30-day structured curriculum teaching AWS from scratch for DevOps engineers, covering core services with daily lessons, hands-on projects, and interview questions.

  28. 31

    pkl

    11.5Kapple/pkl · Java

    Pkl (pronounced Pickle) is a configuration-as-code language created by Apple, built for writing config with rich validation and tooling support.

  29. 32

    kubeasz

    11.4Keaszlab/kubeasz · Jinja

    kubeasz is a set of Ansible playbooks that install a full Kubernetes cluster on your own Linux servers, with docs explaining how the components interact. It is packaged to install cleanly from inside mainland China's network.

  30. 33

    talos

    11.4Ksiderolabs/talos · Go

    Talos is a modern Linux-based operating system built specifically for running Kubernetes: secure, immutable, and minimal, with all system management done through an API instead of a shell.

  31. 34

    terraform-provider-aws

    11.1Khashicorp/terraform-provider-aws · Go

    This is the official HashiCorp Terraform provider for AWS, which lets Terraform create, update, and manage AWS resources through declarative configuration.

  32. 35

    sovereign

    10.6Ksovereign/sovereign · HTML

    Sovereign is a set of Ansible playbooks that build and maintain your own private cloud on a server you control, bundling email, calendar/contacts sync, file storage, VPN, an IRC bouncer, webmail, and more.

  33. 36

    charts

    10.4Kbitnami/charts · Go Template

    Bitnami's library of Helm charts: ready-made packages that launch popular applications on a Kubernetes cluster with a few helm commands instead of hand-written YAML.

  34. 37

    drawio-skill

    10.2KAgents365-ai/drawio-skill · Python

    An agent skill that turns plain-language descriptions and real system sources — code, Terraform, Kubernetes, SQL, OpenAPI — into editable .drawio architecture diagrams, then keeps them synced, tested and exportable.

  35. 38

    Jenkins-Zero-To-Hero

    10.1Kiam-veeramalla/Jenkins-Zero-To-Hero · Python

    A learning repo that walks through Jenkins from zero to hero: installing Jenkins, configuring Docker as a build agent, setting up CI/CD, and deploying apps to Kubernetes using Argo CD in a GitOps workflow.

  36. 39

    omnigraph

    1.3KModernRelay/omnigraph · Rust

    Omnigraph is a lakehouse-native graph database that acts as the operational state and coordination layer for fleets of AI agents, combining graph traversal, vector search, and full-text search with Git-style branching so many agents can enrich a shared knowledge graph safely.

  37. 40

    open-ontologies

    1.1Kfabio-rovai/open-ontologies · Rust

    Open Ontologies lets you plan, apply and roll back changes to a production ontology: it shows every consequence as a blast-radius report before you apply a change, then hands the reviewer a proof they can re-check without trusting you or the engine.

  38. 41

    neckbeard

    245bealesh/neckbeard · Go

    A Claude Code plugin that turns an app repo into cloud infrastructure on AWS, GCP, or Azure, using a human-maintained catalog of tested OpenTofu modules, plus a cost estimate shown before anything is deployed.

  39. 42

    forge

    213cisco-open/forge · HCL

    ForgeMT is an open-source platform from Cisco for running self-hosted GitHub Actions runners on your own AWS accounts — ephemeral EC2 runners and Kubernetes ARC runner scale sets, operated as code across many tenant repos.

  40. 43

    redStackPRO

    161devZero-Security/redStackPRO · Python

    redStackPRO is a web canvas for designing red team attack infrastructure and defensive Active Directory cyber ranges; you compose a topology visually, and it exports a ready-to-run Terraform and Ansible working directory that you deploy yourself.

  41. 44

    full-stack-data-engineering

    145schumannx/full-stack-data-engineering · Python

    A full reference implementation of a streaming data warehouse on AWS: playback events flow from Kafka into a five-zone S3 Iceberg lake, get modeled with Kimball dimensional design, and are served through Athena SQL and HTML reports, all orchestrated by self-hosted Apache Airflow 3.

Often tagged together