Awesome GitHub RepositoriesInfrastructure as Code Tools

Kong is a high-performance API gateway and service connectivity platform designed to manage, secure, and monitor traffic across distributed microservices and hybrid cloud environments. It functions as a centralized control plane for service governance, providing essential traffic routing, load balancing, and request transformation capabilities to ensure consistent policy enforcement across all service endpoints. The platform distinguishes itself through a modular plugin architecture and a declarative configuration engine that allows infrastructure behavior to be defined via version-controlled

This project is a serverless full-stack framework and infrastructure-as-code tool designed for deploying and managing full-stack applications. It functions as a cloud-native deployment orchestrator that synchronizes application code and environment variables across frontend content delivery networks and backend API endpoints. The platform enables the deployment of complete application architectures on either private or cloud infrastructure. It allows for the orchestration of self-hosted applications without the need to manage traditional virtual servers. The system covers serverless infrastr

Omarchy is a directory structure orchestrator that automates the provisioning and maintenance of file system hierarchies. By utilizing declarative configuration files, it allows users to define a desired workspace layout that serves as a single source of truth, ensuring that local development environments remain consistent and reproducible across distributed teams. The tool functions as an infrastructure-as-code utility for local environments, employing idempotent reconciliation to compare the current file system state against the defined configuration. It automatically applies only the neces

Temporal is a distributed workflow orchestration engine designed to manage fault-tolerant, stateful, and long-running background processes. It functions as a platform for coordinating complex cross-service operations, ensuring consistency and reliability in distributed environments by decoupling workflow orchestration from task execution. The platform distinguishes itself through a deterministic, event-sourced execution model that reconstructs workflow state by re-executing code from an immutable event log. This approach isolates non-deterministic side effects into managed activities, allowin

Chalice is a framework for building and deploying serverless applications and REST APIs on AWS Lambda using Python. It functions as an infrastructure-as-code generator, mapping application logic and routing definitions directly to cloud compute resources while automating the provisioning and management of the underlying environment. The framework distinguishes itself by analyzing source code to automatically construct the minimum necessary security permissions, ensuring least-privilege access for all deployed functions. It supports modular development through blueprint-based organization and

Boto3 is the AWS SDK for Python, providing a programmatic interface for managing and automating AWS cloud infrastructure and services. It serves as a cloud management API client and resource manager for provisioning, configuring, and scaling virtual servers, databases, and storage. The library enables the implementation of infrastructure-as-code through declarative templates and scripts, allowing for the deployment of identical resource stacks across multiple accounts and geographic regions. It also provides a framework for coordinating distributed workflows, serverless functions, and contain

Agones is a Kubernetes game server orchestrator designed for hosting, scaling, and managing dedicated multiplayer game servers. It extends the Kubernetes control plane using custom resource definitions to define game server and fleet objects, utilizing a dedicated fleet manager to maintain pools of warm server instances. The system provides a game server SDK and language-specific client libraries that allow server processes to signal readiness, health, and shutdown states directly to the controller. It distinguishes itself through specialized scaling logic, including the use of WebAssembly mo

The AWS SAM Command Line Interface is a development toolkit used to define, emulate, and manage the lifecycle of serverless infrastructure. It serves as an infrastructure as code tool and a wrapper for AWS CloudFormation, allowing users to describe cloud resources through declarative templates. The project differentiates itself by providing a local serverless emulator that uses containers to execute and debug functions before they are deployed. It also enables rapid cloud iteration through real-time synchronization, which monitors local source code for changes and automatically pushes updates

TFLint 是一款静态分析工具和基础设施即代码（IaC）验证器，旨在识别 Terraform 配置文件中的错误并强制执行最佳实践。它既是自动化工作流的质量关卡，也是一个语言服务器，可直接在支持的文本编辑器中提供实时诊断和 linting 错误提示。 该项目利用 gRPC 插件框架，允许通过独立的二进制文件和专用 SDK 集成自定义的供应商特定验证规则。这种架构将核心 linting 逻辑与云服务商特定的验证分离开来，支持自动安装外部规则集，以根据官方规范验证资源属性。 其分析引擎能够解析配置值并评估内置函数，通过展开动态块和资源集合来检查最终实例化的结构。它涵盖了编码标准强制执行、模块调用分析以及无效资源属性的检测，并支持以 SARIF 等格式导出结构化结果。 该工具包含一个用于分析目标过滤的命令行界面，并为支持的规则提供自动修复功能。

ZenML is an orchestration platform designed for building, deploying, and monitoring reproducible machine learning pipelines and agentic workflows. It provides a unified framework that manages the entire lifecycle of machine learning assets, from data processing and model training to the deployment of persistent inference services. By decoupling pipeline logic from underlying compute and storage, the platform enables teams to transition workflows seamlessly from local development environments to production-grade cloud infrastructure. The platform distinguishes itself through a service-oriented

YDB 是一个分布式 SQL 数据库和分析引擎，专为水平扩展和强一致性而设计。它作为一个多模型系统，通过提供可序列化 ACID 事务的分布式架构支持事务和分析工作负载。 该系统以其广泛的协议兼容性而著称，实现了用于标准 SQL 驱动程序的 PostgreSQL 有线协议和用于消息传递与流处理的 Kafka 协议。它进一步作为向量数据库，支持用于语义搜索和嵌入的向量索引以及近似最近邻搜索。 该平台使用具有行式和列式格式的混合存储模型管理数据，利用向量化查询执行进行 PB 级分析。其操作范围包括变更数据捕获流、精确一次（exactly-once）持久队列和多区域高可用性。 部署和生命周期管理通过 Kubernetes Operator 和基础设施即代码（IaC）配置提供支持。

jx 是一个 GitOps 交付平台和 Kubernetes CI/CD 编排器，旨在自动化应用程序的构建和部署。它作为云原生流水线管理器，使用可重用任务目录执行基于容器的构建和部署序列。 该项目通过预览环境的自动化编排脱颖而出，预览环境根据拉取请求活动创建和销毁，以便在合并前进行验证。它采用基于 GitOps 的状态同步模型，通过轮询 git 仓库并应用经过验证的配置更新来维护集群的期望状态。 该系统涵盖了广泛的功能，包括 Helm chart 部署管理、多集群编排和外部机密存储集成。它还为增量应用程序重建和本地到 Pod 的代码同步提供了开发人员生产力工具。 安装通过 git 操作员部署和引导集群作业进行管理，以确保工具的一致性。

auto-dev 是一款 AI 原生软件工程工具和多代理开发平台，旨在自动化整个软件开发生命周期。它作为一个自主编排器，通过声明式代理链管理 AI 驱动的编码、测试和基础设施配置。该项目基于 Kotlin Multiplatform AI 框架构建，允许代理逻辑在不同的环境和设备界面上运行。 该平台实现了模型上下文协议，以与外部 AI 服务交换工具和项目信息。它通过使用检索增强生成管道和基于树的代码图分析脱颖而出，这些分析抽象语法树和调用链以压缩项目上下文并减少幻觉。交互式开发画布提供 UML 图、OpenAPI 规范和代码差异的实时同步。 功能领域涵盖自主软件开发，包括动态任务规划、迭代测试驱动修复和遗留代码迁移。该系统还处理 Docker 和 CI/CD 配置的基础设施即代码自动化、AI 驱动的代码审查，以及跨团队协调共享 AI 个性和提示规范。 核心逻辑使用 Kotlin Multiplatform 实现，以确保跨平台代理部署的一致性。

Dhall 是一种类型安全的配置语言，旨在创建保证能够终止的可编程配置文件。它是一种非图灵完备的语言，使用严格的类型系统来确保正确性并防止评估过程中的无限循环。 该项目作为一个确定性的配置引擎和编组工具，将可编程表达式转换为 JSON、YAML 和 Bash 等静态格式。它的特色在于专注于安全性和完整性，使用语义哈希来锁定远程导入，并强制执行源策略以防止数据泄露。 其功能涵盖了广泛的配置管理领域，包括使用多态函数、联合类型和记录补全来减少冗余。它提供了用于模式验证、远程表达式解析的工具，以及用于编辑器集成的语言服务器协议 (LSP) 实现。 该语言提供了一个命令行界面和一个用于评估表达式及验证等价性的 REPL。

Otto 是一个混合云编排平台，旨在通过基础设施即代码（IaC）在不同的云环境中配置基础设施并部署应用工作负载。它作为一个 IaC 配置工具，通过策略驱动的工作流实现一致性资源的自动化部署。 该项目包含一个用于管理服务发现和应用间安全通信的混合云服务网格，以及一个用于管理密钥和实施细粒度访问控制的基于身份的访问控制器。它还具备一个基础设施知识图谱，能够映射混合云资产，从而可视化依赖关系并识别运营修复机会。 该平台涵盖了广泛的功能领域，包括微服务和单体应用的自动化交付、混合云基础设施配置，以及通过身份感知代理实现的安全网络访问。此外，它还提供了管理机器镜像和在不同环境中编排工作负载伸缩的工具。

Cluster API 是一个声明式框架和多集群管理系统，用于自动化跨不同基础设施的 Kubernetes 集群的创建、伸缩和销毁。它作为一个集群配置编排器和基础设施配置工具，使用集中的管理集群来操作多个远程工作负载集群的完整生命周期。 该项目采用基于提供商的插件架构，将核心编排逻辑与特定的云或裸机实现解耦。这使得系统能够通过一组通用资源契约和 API 定义来标准化控制平面的部署、节点的引导以及基础设施的管理。 该系统涵盖了广泛的运营功能，包括机器集群编排、控制平面伸缩和声明式集群升级。它还处理底层基础设施需求，例如故障域分布、IP 地址管理和证书轮换。 提供了用于集群模拟、便携式基础设施测试以及开发自定义引导和基础设施提供商的开发者工具。

DNSControl is an infrastructure-as-code tool designed to manage DNS records and zones across multiple providers through a unified, programmable configuration language. By treating DNS as code, it enables teams to maintain consistent infrastructure state, automate record updates, and perform version-controlled management of network settings across diverse cloud, registrar, and network DNS services. The system functions as a multi-provider orchestrator that uses a declarative reconciliation engine to compare local configurations against live remote states. It employs a provider-agnostic abstrac

该项目是一个 API 网关和 Ingress 控制器，旨在管理 Kubernetes 环境中的流量、安全性和服务连接。它作为一个控制器运行，监控集群状态以使网关配置与期望的基础设施定义保持一致，确保网络策略和路由规则在分布式部署中保持一致。 该系统通过一个模块化请求管道脱颖而出，该管道允许注入自定义逻辑以处理转换、安全检查和日志记录。它支持声明式基础设施管理，使用户能够通过版本控制的清单定义流量策略和网关设置。通过与外部密钥存储集成并提供对多个网关实例的集中控制，它为 API 消费者维护了一种统一的策略强制执行和身份管理方法。 除了核心路由外，该平台还提供全面的流量管理功能，包括针对 HTTP、TCP 和 gRPC 协议的负载均衡、健康监控和请求路径修改。它通过集成的证书管理促进安全通信，并允许对消费者策略进行分组，以确保跨服务架构的一致访问控制。

RBAC Manager is a Kubernetes operator that automates the management of role-based access control and service account permissions. It functions as a controller that synchronizes cluster authorization resources with user-defined configuration files, ensuring that security settings remain consistent with established requirements. The system operates by monitoring the cluster API for changes and reconciling the current state against declarative manifests. By treating authorization as infrastructure as code, it enables teams to manage permissions through version-controlled files rather than manual