Awesome GitHub RepositoriesInfrastructure as Code

Terraform is a declarative infrastructure-as-code tool designed to manage the lifecycle of cloud and on-premises resources. It functions as a workflow engine that reconciles a defined desired state against real-world infrastructure, using a persistent state-tracking layer to maintain consistency and visibility across distributed environments. By mapping infrastructure components into a directed acyclic graph, the system calculates the optimal order for provisioning, updating, or destroying resources. The platform is distinguished by its extensible plugin-based architecture, which decouples co

Packer is a machine image build tool and multi-platform image orchestrator. It functions as an infrastructure as code image builder that produces identical machine images across multiple platforms from a single source configuration to ensure environment consistency. The tool enables the creation of a golden image pipeline by generating compatible system images for different cloud providers and on-premises hypervisors. It includes an image lifecycle registry to store metadata for tracking the versioning and status of generated images. The system manages the automation of machine image creatio

This project is a collection of shell-based automation scripts designed to automate the deployment and configuration of Linux containers and virtual machines on Proxmox VE hosts. It provides toolsets for the scripted provisioning of virtual machine infrastructure and the creation of pre-defined containers for various applications. The toolset includes specialized utilities for Proxmox host management, such as automating post-installation setup, managing system backups, and cleaning up old kernels to reclaim disk space. It further provides automated configurations for hardware passthrough, ena

Azure Docs is the official technical documentation repository for Microsoft Azure, the cloud computing platform. It provides comprehensive guidance on the full spectrum of Azure services, covering everything from core infrastructure components like virtual machines, Kubernetes clusters, and serverless computing to platform services for AI, machine learning, data analytics, and storage. The documentation details how to provision, manage, and govern cloud resources at scale, including policy enforcement, identity management, and cost optimization. The documentation distinguishes Azure through i

Up is a deployment tool that transforms any HTTP server into an AWS Lambda function behind API Gateway with a single command, eliminating server management entirely. It provides a unified platform for building and deploying serverless APIs that scale automatically and charge only for actual usage, while supporting Node.js, Go, Python, Java, Crystal, and Clojure runtimes without per-language configuration. The tool automates the generation and management of all required AWS resources—including Lambda, API Gateway, CloudFront, and S3—from a declarative configuration, and can replicate the entir

Webiny 是一个 AI 可编程、云原生的无头内容管理系统（Headless CMS），专为企业级规模设计。它作为一个多租户内容平台和编排器，隔离数据、用户和权限，从而在单一部署中托管数千个独立租户。 该平台以其 AI 辅助工程能力而著称，提供协议服务器，为 AI 代理提供生成类型化代码、内容模型和 API 扩展所需的结构化上下文。它通过部署在 AWS 基础设施上的云原生架构实现差异化，使用基础设施即代码（IaC）来配置和修改云函数及存储桶。 该系统涵盖广泛的内容操作，包括数字资产管理、用于解耦前端的可视化页面构建，以及具有多步审批和定时发布功能的发布工作流编排。它还包括通过类型化脚本和生命周期钩子进行平台扩展的机制，并允许管理界面自定义和品牌化。 部署和环境设置通过命令行界面进行管理。

Doxygen is a source code documentation generator and multi-language API reference tool. It extracts annotated comments from source code to create structured technical manuals and searchable software libraries in formats including HTML, LaTeX, and PDF. The project functions as a static code analysis visualizer, generating call graphs, class diagrams, and inheritance hierarchies to illustrate codebase structure. It also serves as an XML documentation export engine, producing structured metadata that can be transformed via XSLT or third-party tools. Beyond API extraction, the tool provides a Ma

Faktory is an open-source work server that queues, dispatches, and manages background jobs across multiple programming languages. It stores job payloads as JSON hashes in a Redis-backed queue and provides language-specific client and worker libraries that enable any language to push jobs to the server or fetch and execute them. The server includes a batch workflow orchestrator that groups jobs into batches with completion tracking for coordinating multi-step asynchronous workflows. It features a configurable job uniqueness filter that prevents duplicate enqueues within a time window, an expon

KurrentDB is an event-native database designed for event sourcing and event-driven architectures. It stores events as immutable, ordered records in streams, preserving a complete audit trail and enabling temporal queries. The database uses gRPC for all client-server and inter-node communication, providing efficient binary serialization and bidirectional streaming, and supports atomic multi-stream writes that ensure consistency across multiple streams in a single transaction. The database distinguishes itself with a built-in JavaScript projection engine that transforms, filters, and aggregates

A courseware built on the belief that anyone can learn foundational cloud engineering skills with the right guide and discipline

This project is a reference library and collection of example code patterns for deploying cloud infrastructure using the AWS CDK. It provides a set of sample projects that demonstrate how to define compute, storage, and networking resources using general purpose programming languages. The library includes reference implementations for various architectural patterns, including serverless backends with GraphQL and WebSocket APIs, container orchestration with load balancers and auto-scaling, and global static website hosting via content delivery networks. It also provides designs for isolated ne

该项目提供了战略路线图和指南，详细介绍了托管容器编排和安全服务的演进与部署模式。它作为 EKS、ECS、ECR 和 Fargate 即将推出的功能和开发优先级的公共跟踪文档。 该资源包括云容器编排指南以及 Kubernetes 和 ECS 战略，概述了云基础设施的托管 Kubernetes 和专有编排服务的开发。它还提供了专注于扫描恶意活动和跟踪工作负载健康状况的安全和监控计划。 该材料涵盖了广泛的基础设施功能，包括资源配置、计算和任务的自动扩展以及容器镜像管理。它通过负载均衡和 Pod 密度优化来解决网络和流量管理问题，并通过日志路由和性能跟踪来解决可观测性问题。

Terraform Cloud Development Kit 是一个基础设施即代码（IaC）框架，允许使用通用编程语言定义云资源。它作为一个配置合成器，将高层编程逻辑和提供商模式转换为由 Terraform 引擎执行以配置基础设施的 JSON 配置文件。 该框架提供了一个多语言基础设施库，能够从提供商模式自动生成特定语言的类。它支持创建可重用的构造（constructs），允许将复杂的资源配置封装为可在不同支持语言间打包和发布的共享组件。 该工具集包括用于管理多环境部署的隔离基础设施栈和配置状态后端的各种功能。它还提供项目脚手架、HCL 转换以及通过配置语法验证、资源属性断言和快照测试进行质量保证的实用程序。

DetectionLab is a reproducible Windows Active Directory security lab designed for testing detection capabilities. It uses an automation framework based on Vagrant and Packer to provision virtualized networks across multiple hypervisors and cloud platforms. The project utilizes Ansible for the declarative installation and configuration of domain services and endpoint security tools. It incorporates a browser-based remote access interface via Apache Guacamole to manage laboratory hosts without requiring standalone remote desktop clients. The environment includes a telemetry pipeline that aggre

terraform-docs is a Terraform module documentation generator and infrastructure as code documenter. It extracts inputs, outputs, and resources from Terraform configuration files to automatically create formatted technical guides and metadata exports. The tool functions as a multi-format metadata exporter, transforming module information into Markdown tables, AsciiDoc, JSON, YAML, XML, and TOML. It also serves as a CI/CD documentation automator, allowing for the integration of documentation updates into commit hooks and deployment pipelines. Capability areas include module documentation extra

This is a reference guide for designing, deploying, and maintaining production-ready machine learning systems, grounded in MLOps best practices. It covers the complete machine learning lifecycle, from system design and workflow planning through to deployment and ongoing maintenance, with a focus on reliability, scalability, and maintainability as business requirements evolve. The guide provides an architecture reference for establishing shared ML infrastructure, including model registries and feature stores that standardize asset reuse across teams. It details pipeline automation through conf

Terraforming 是一个基础设施即代码生成器和 AWS Terraform 资源导出器。它将实时云基础设施转换为声明式配置和状态文件，允许将现有云资源纳入编程管理。 该工具作为一个状态文件管理器，能够生成和合并 JSON 状态文件。它将实时云提供商 API 响应转换为 HashiCorp Configuration Language 语法，并可以将新导出的资源数据集成到现有状态文件中，而不会覆盖不相关的条目。 该系统包括资源发现和审计功能，以及通过 AWS 配置文件身份验证和 IAM 角色承担进行的身份和访问控制。它被设计为一个容器化实用程序，可以在 Docker 内部运行，以将依赖项与主机隔离。

Otto 是一个混合云编排平台，旨在通过基础设施即代码（IaC）在不同的云环境中配置基础设施并部署应用工作负载。它作为一个 IaC 配置工具，通过策略驱动的工作流实现一致性资源的自动化部署。 该项目包含一个用于管理服务发现和应用间安全通信的混合云服务网格，以及一个用于管理密钥和实施细粒度访问控制的基于身份的访问控制器。它还具备一个基础设施知识图谱，能够映射混合云资产，从而可视化依赖关系并识别运营修复机会。 该平台涵盖了广泛的功能领域，包括微服务和单体应用的自动化交付、混合云基础设施配置，以及通过身份感知代理实现的安全网络访问。此外，它还提供了管理机器镜像和在不同环境中编排工作负载伸缩的工具。

Suspenders 是一个 Ruby on Rails 项目引导程序和应用模板。它通过集成一套预配置的监控、测试和版本控制库，为初始化服务器端项目提供了标准化的基础。 该工具包具有一个针对 Heroku 优化的专用部署框架，可自动将代码交付到预发布和生产环境。它采用基础设施即代码的方法，使用版本化的配置文件来确保跨不同云环境的一致性并减少部署中断。 该项目涵盖了用于持续集成和交付的自动化工作流，包括自动化测试和样式检查。它还包括环境配置功能，例如配置 Git 远程仓库和数据库设置。