mirror of
https://github.com/nubenetes/awesome-kubernetes.git
synced 2026-07-12 18:00:37 +00:00
41 KiB
41 KiB
Infrastructure Provisioning. Infra Management Tools. IaC Infrastructure as Code
!!! info "Architectural Context" Detailed reference for Infrastructure Provisioning. Infra Management Tools. IaC Infrastructure as Code in the context of Hardened Infrastructure.
Table of Contents
Architectural Foundations
Kubernetes Tools
General Reference
- Terraform Provider for Google Cloud 7.0 is now GA [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering Terraform Provider for Google Cloud 7.0 is now GA in the Kubernetes Tools ecosystem.
- IBM IAM for AI Agents [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering IBM IAM for AI Agents in the Kubernetes Tools ecosystem.
- Terraform for Standardizing AWS Deployments [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering Terraform for Standardizing AWS Deployments in the Kubernetes Tools ecosystem.
- Azure Landing Zone IaC Accelerator [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering Azure Landing Zone IaC Accelerator in the Kubernetes Tools ecosystem.
- Terraform Enterprise 2.0 [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering Terraform Enterprise 2.0 in the Kubernetes Tools ecosystem.
- Scale with Confidence Using Terraform: Better Cost Visibility, Stronger' Governance, and Less Operational Overhead [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering Scale with Confidence Using Terraform: Better Cost Visibility, Stronger' Governance, and Less Operational Overhead in the Kubernetes Tools ecosystem.
- bridgecrew.io: 5 tips for securely adopting infrastructure as code [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering bridgecrew.io: 5 tips for securely adopting infrastructure as code in the Kubernetes Tools ecosystem.
- daffodilsw.medium.com: What is Infrastructure Automation in DevOps? [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering daffodilsw.medium.com: What is Infrastructure Automation in DevOps? in the Kubernetes Tools ecosystem.
- faun.pub: The best Infrastructure as Code tools for 2021 [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering faun.pub: The best Infrastructure as Code tools for 2021 in the Kubernetes Tools ecosystem.
- medium.com/@bunnyshell: How to Overcome Infrastructure as Code (IaC) Challenges [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering medium.com/@bunnyshell: How to Overcome Infrastructure as Code (IaC) Challenges in the Kubernetes Tools ecosystem.
- dzone.com/articles: A Beginner's Guide to Infrastructure as Code 🌟 [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering dzone.com/articles: A Beginner's Guide to Infrastructure as Code 🌟 in the Kubernetes Tools ecosystem.
- javacodegeeks.com: Infrastructure as Code: Best Tools For 2023 Included [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering javacodegeeks.com: Infrastructure as Code: Best Tools For 2023 Included in the Kubernetes Tools ecosystem.
- medium.com/@faisalkuzhan: DAY_43/90 => Infrastructure as Code(IaC) [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering medium.com/@faisalkuzhan: DAY_43/90 => Infrastructure as Code(IaC) in the Kubernetes Tools ecosystem.
- levelup.gitconnected.com: Short: Using IaC over Clickops [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering levelup.gitconnected.com: Short: Using IaC over Clickops in the Kubernetes Tools ecosystem.
- cncf.io: Cloudformation vs. Terraform: Which is better? [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering cncf.io: Cloudformation vs. Terraform: Which is better? in the Kubernetes Tools ecosystem.
- Terraform 1.15: Flexible Module Management, Deprecation Warnings, and Windows' ARM64 Support [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering Terraform 1.15: Flexible Module Management, Deprecation Warnings, and Windows' ARM64 Support in the Kubernetes Tools ecosystem.
- The Maester - Terraform Module [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering The Maester - Terraform Module in the Kubernetes Tools ecosystem.
- medium.com/nerd-for-tech: Kubernetes: Declaratively Deploying Infrastructure' (IaC) [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering medium.com/nerd-for-tech: Kubernetes: Declaratively Deploying Infrastructure' (IaC) in the Kubernetes Tools ecosystem.
- medium.com/globant: Infrastructure as Code using Kubernetes [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering medium.com/globant: Infrastructure as Code using Kubernetes in the Kubernetes Tools ecosystem.
- IaC and OpenShift Virtualization handshake (using Terraform for VMs on OCP) [COMMUNITY-TOOL] — A curated technical resource and architectural guide covering IaC and OpenShift Virtualization handshake (using Terraform for VMs on OCP) in the Kubernetes Tools ecosystem.
Cloud Infrastructure
Infrastructure as Code
Compliance Auditing
- (2026) AWS Well-Architected IaC Analyzer ⭐ 483 [PYTHON CONTENT] [ADVANCED LEVEL] 🌟🌟 [COMMUNITY-TOOL] — An AWS-backed auditing analyzer designed to inspect CloudFormation and Terraform designs against the AWS Well-Architected standard. Evaluates infrastructure-as-code deployments for security vulnerabilities and reliability issues before runtime provisioning.
History and Insights
- (2026) youtube: Mitchell Hashimoto: The Inside Story of HashiCorp's IaC Journey | The IaC Podcast [NONE CONTENT] [COMMUNITY-TOOL] — An in-depth video interview exploring the early development, design constraints, and technological milestones of HashiCorp's suite. Offers high-level insights into state management and the evolution of cloud orchestration.
Migration Strategies
- (2026) The Definitive Guide to Importing Your Cloud Resources into IaC [NONE CONTENT] [COMMUNITY-TOOL] — A detailed technical review addressing drift reconciliation when converting untracked click-ops clouds into declarative state files. Reviews native state import commands and toolkits that automate resource generation.
Schema Generation
- (2026) TerraSchema: Generate JSON Schema from Terraform Configurations ⭐ 71 [GO CONTENT] 🌟 [COMMUNITY-TOOL] — A specialized CLI tool that parses declared Terraform configurations to generate structural JSON Schemas. Useful for running runtime validation scripts on dynamic inputs or verifying API schemas during configuration processing.
Terraform Practices
- (2026) Terraform Best Practices ⭐ 2473 [MARKDOWN CONTENT] [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A definitive guide detailing patterns and antipatterns for structural Terraform designs. Features industry-accepted guidelines on monorepo layout, variable validation, dynamic module injection, and drift remediation within production enterprise clouds.
Kubernetes and Operators
GCP Resources
- (2026) cloud.google.com/config-connector [NONE CONTENT] [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Explains GCP Config Connector implementation patterns. Lets engineers configure Google Cloud infrastructure through Kubernetes Custom Resource Definitions, utilizing Kubernetes controllers to construct databases, IAM permissions, and storage endpoints.
Cloud Management
FinOps
Optimization
- (2024) infoworld.com: 5 priorities that cut cloud costs and improve IT ops [COMMUNITY-TOOL] — Outlines five critical priorities for cutting cloud computing costs and enhancing operations. Covers automated resource destruction, VM rightsizing, and leveraging IaC templates to eliminate abandoned cloud environments.
DevOps
GitOps
Automation
- (2023) thenewstack.io: Achieve GitOps on Day One with IaC Automation [COMMUNITY-TOOL] — Provides a comprehensive pathway to establish GitOps on day one. Demonstrates how uniting declarative IaC tools with Git-based source repositories ensures compliance, configuration auditing, and unified cluster state management.
Infrastructure as Code (1)
AI Assisted
- (2023) matt-rickard.com: Infrastructure as Code Will be Written by AI [COMMUNITY-TOOL] — Explores how generative AI can be used to compile declarative DSL configurations. Argues that structural files (such as Terraform or Pulumi definitions) are excellent translation targets for LLMs due to explicit syntax schemas.
AI Integration
- (2026) Terraform & OpenTofu Skill for AI Agents ⭐ 2012 [TYPESCRIPT CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — An open-source Model Context Protocol (MCP) skill set built for AI agents. Simplifies parsing, validating, and managing Terraform and OpenTofu infrastructure configurations through intelligent, context-aware LLM tool calls.
Architecture
- (2023) devopscube.com: Immutable Infrastructure Explained For Beginners [COMMUNITY-TOOL] — A beginner's guide detailing the immutable infrastructure pattern, where infrastructure elements are replaced rather than modified in place. Highlights benefits in predictability, rollbacks, and drift management.
Best Practices
- (2023) build5nines.com: Benefits of Convention over Configuration for IaC Deployment Projects [COMMUNITY-TOOL] — Explores the benefits of standardizing infrastructure template files using Convention over Configuration patterns. Demonstrates how strict naming rules, predictable directory structures, and shared default values eliminate redundant code segments.
CICD Platforms
- (2023) spacelift.io: Why Generic CI/CD Tools Will Not Deliver Successful IaC [COMMUNITY-TOOL] — Explains why generic CI/CD tooling lacks features required to safely deploy stateful IaC projects. Details why specialized state engines, runtime locking mechanisms, policy enforcement, and drift tracking are required for reliable cloud management.
Culture
- (2022) agileconnection.com: Infrastructure as Code: The Foundation of Effective DevOps [COMMUNITY-TOOL] — Evaluates the cultural integration of IaC principles within Agile and DevOps environments. Discusses using source control pipelines to automate configuration deployment, lowering environment discrepancies and boosting build velocity.
Fundamentals
- (2022) invensislearning.com: Infrastructure as a Code Tutorial: How it Works, Types, and Best Practices [COMMUNITY-TOOL] — A detailed tutorial outlining standard IaC approaches, including declarative vs. imperative systems. Presents configurations for orchestration, provisioning, and configuration management tools while proposing best practices for scalable deployments.
- (2021) stackoverflow.blog: Infrastructure as code: Create and configure infrastructure elements in seconds [COMMUNITY-TOOL] — Introduces the foundational design patterns of Infrastructure as Code (IaC). Explains how codifying environments speeds up resource instantiation, eliminates configuration drift, and acts as the basis for reliable automation pipelines.
Lifecycle Management
- (2023) devops.com: Updating and Managing Infrastructure-as-Code (IaC) [ADVANCED LEVEL] [LEGACY] — Details architectural strategies for maintaining, refactoring, and upgrading legacy IaC bases. Explores lockfile maintenance, drift remediation, and structural validation steps required for safe production updates.
Local Environments
- (2023) thenewstack.io: Local Environment-as-Code: Is It Possible Yet? [COMMUNITY-TOOL] — Investigates the feasibility of Local Environment-as-Code setups. Evaluates containerized tools and localized VM platforms designed to establish parity between developer workstations and live cloud targets.
Organizational
- (2022) thenewstack.io: Struggling with IT Staff Leaving? Try Infrastructure as Code 🌟 [COMMUNITY-TOOL] — Discusses the organizational value of IaC in codifying systems architecture and retaining tribal knowledge. Helps mitigate risks associated with staff transitions and streamlines onboarding for new engineering hires.
Provisioning Paradigms
- (2022) redhat.com: Pull vs. push in automated VM provisioning: What you need to know [COMMUNITY-TOOL] — Contrasts pull-based versus push-based agent topologies in virtual machine provisioning and automated deployment. Examines architectural tradeoffs concerning firewall security, agent management overhead, and consistency sync loops.
Pulumi
- (2026) ==Pulumi: Infrastructure as Code in Any Programming Language== ⭐ 25299 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An open-source, multi-cloud infrastructure platform that enables architects to build, deploy, and manage resources using general-purpose programming languages. Supports TypeScript, Go, Python, C#, and Java, using real language constructs like loops, functions, and standard testing libraries.
Security
- (2023) thenewstack.io: IaC Cloud Misconfiguration Tools too Noisy without Context [COMMUNITY-TOOL] — Analyzes alert noise generated by static security scanners on IaC configurations. Argues for context-aware validation engines that cross-reference code anomalies with actual live runtime status to accurately prioritize critical security vulnerabilities.
- (2022) thenewstack.io: Infrastructure-as-Code: Increase Security, Scale Development [COMMUNITY-TOOL] — Investigates the role of IaC in improving developer velocity and security posture. Shows how code-based peer reviews, automated security policy gates, and structured configurations prevent critical misconfigurations prior to target deployment.
Strategy
- (2022) thenewstack.io: Infrastructure as Code or Cloud Platforms — You Decide! [COMMUNITY-TOOL] — Analyzes the trade-offs between self-managed IaC templates and fully managed native cloud platform services. Evaluates cost models, execution control, vendor lock-in, and infrastructure administration over long lifecycles.
Terminology
- (2022) thenewstack.io: GUIs, CLI, APIs: Learn Basic Terms of Infrastructure-as-Code [COMMUNITY-TOOL] — Clarifies foundational interfaces—GUIs, CLIs, and APIs—used in automated provisioning workflows. Details how modern declarative execution pipelines abstract these layers to guarantee predictable environment configurations.
Terraform
Secrets
- (2025) Ephemeral Values in Terraform [HCL CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Explains the design and execution mechanics of Ephemeral Values introduced in modern Terraform releases. Discusses preventing credential leakages by keeping sensitive short-lived resources completely out of persistent state logs.
Tool Comparison
- (2023) intellipaat.com: Terraform vs Ansible: Key Differences Between Terraform and Ansible 🌟 [COMMUNITY-TOOL] — Compares Terraform and Ansible, focusing on state management and typical use cases. Shows how Terraform specializes in declarative stateful cloud provisioning, while Ansible excels at stateless procedural host and configuration management.
- (2023) clickittech.com: Terraform vs CloudFormation: The Final battle 🌟 [COMMUNITY-TOOL] — Contrasts multi-cloud HashiCorp Terraform alongside single-provider AWS CloudFormation. Highlights practical design differences, including provider architecture support, state file isolation, and resource onboarding speeds.
- (2023) k21academy.com: Terraform vs Ansible: Working, Difference, Provisioning 🌟 [COMMUNITY-TOOL] — Analyzes the operational execution models of Terraform and Ansible. Guides systems engineers on matching target workloads with the proper tool—using Terraform for infrastructure creation and Ansible for node system configuration.
- (2023) spacelift.io: Terraform vs. Ansible : Key Differences and Comparison of Tools [COMMUNITY-TOOL] — A structured analytical comparison between HashiCorp Terraform and Ansible. Covers key architecture differences, mutable versus immutable resource management, and state files.
- (2023) env0.com: Ansible vs Terraform: Choose One or Use Both? [COMMUNITY-TOOL] — Examines how to combine Terraform and Ansible in hybrid pipelines. Details architectures for provisioning base cloud infrastructure with Terraform while using Ansible for VM-level configuration.
- (2023) awstrainingwithjagan.com: Comprehensive Comparison of Top Infrastructure as Code (IaC) Tools [COMMUNITY-TOOL] — Provides a comprehensive matrix of top IaC frameworks. Evaluates learning curves, multi-cloud capabilities, configuration language types (YAML, JSON, DSL, or general-purpose languages), and drift remediation mechanisms.
- (2022) techcommunity.microsoft.com: Infrastructure as Code (IaC): Comparing the Tools [COMMUNITY-TOOL] — Synthesizes Azure Bicep, ARM Templates, Terraform, and Ansible within Azure enterprise contexts. Offers guidance on choosing the right IaC ecosystem depending on cloud-native lock-in constraints and operational requirements.
Tooling
- (2023) clickittech.com: Infrastructure as Code Tools, what are the best IaC tools? 🌟 [COMMUNITY-TOOL] — An evaluation of popular Infrastructure-as-Code platforms. Summarizes and compares capabilities, community support, and typical target platforms across industry-standard options like Terraform, Ansible, Pulumi, and CloudFormation.
Training
- (2023) freecodecamp.org: Infrastructure as Code - Full Course 🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A full-scale tutorial covering the entire spectrum of Infrastructure as Code. Educates on fundamental engines, continuous state management, structural cloud setups, and continuous integration workflows.
Workflows
- (2022) alpacked.io: Infrastructure as Code in DevOps 🌟 [COMMUNITY-TOOL] — Synthesizes why Infrastructure as Code represents the baseline of high-velocity DevOps frameworks. Features modular code design, collaborative version-control practices, and multi-tenant environment consistency.
DevOps and CICD
CICD Automation
Terraform Release Management
- (2026) Terraform Module Releaser GitHub Action ⭐ 223 [TYPESCRIPT CONTENT] 🌟🌟 [COMMUNITY-TOOL] — An automated GitHub Action that manages release tagging, semantic version tracking, and registration publication processes for Terraform modules. Mitigates distribution overhead by auto-generating changelogs and managing tags.
Infrastructure as Code (2)
AI Code Generation
- (2026) gofireflyio/aiac 🌟 ⭐ 3792 [GO CONTENT] 🌟🌟🌟 [ENTERPRISE-STABLE] — Duplicate entry of the AI-powered infrastructure command-line application (aiac). Generates clean IaC templates, Dockerfiles, and CI pipelines through natural language translation engines.
Security Scanning
- (2026) Checkmarx/kics ⭐ 2649 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] — An open-source static code analysis engine designed to uncover vulnerabilities and structural issues in IaC manifests. Parses Terraform, Kubernetes manifests, Helm charts, Dockerfiles, and Ansible files for compliance discrepancies.
Roadmaps
Career Path
- (2026) DevOps Roadmap for 2026 ⭐ 19614 [MARKDOWN CONTENT] 🌟🌟🌟🌟 [DE FACTO STANDARD] — An extensive, highly-vetted community map outlining modern DevOps and platform engineering educational pathways. Synthesizes knowledge milestones across systems internals, network protocols, continuous integration/continuous delivery protocols, and hybrid observability.
DevOps Automation and Modern Systems Engineering
Infrastructure-as-Code
Platform Engineering
- (2022) itnext.io: Platform-as-Code: how it relates to Infrastructure-as-Code and what it enables [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Delineates the evolution from standard Infrastructure-as-Code (IaC) to Platform-as-Code (PaC), where platform teams deliver fully orchestrated, self-service developer environments. Highlights how defining platforms declaratively abstracts raw cloud interfaces, simplifying application lifecycle deployment.
Infrastructure
Sysadmin
Resources
- (2026) ==Awesome Sysadmin== ⭐ 34277 [MARKDOWN CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An exhaustive curation of open-source sysadmin resources, listing production-ready system monitors, configuration management tools, security suites, and virtualization frameworks used globally by SREs.
Infrastructure as Code (3)
Architecture (1)
Diagrams
- (2024) CloudCanvas - Diagramming for Cloud Infrastructure [TYPESCRIPT CONTENT] [EMERGING] — CloudCanvas is an emerging interactive workspace tool tailored for designing cloud topologies and auto-generating infrastructure-as-code manifests. By linking architectural nodes directly to API-driven configurations, it helps bridge the gap between architectural diagramming and operational execution.
Terraform Providers
Azure IPAM
- (2024) ==Terraform Provider for Azure IPAM== ⭐ 10 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Custom open-source Terraform provider built to automate cloud IP address allocation directly from centralized Azure IPAM solutions. Ensures smooth networking configuration inside containerized setups.
Verification and AI
Copilot Verification
- (2025) ==AZVerify: Bridging Azure Resources, Bicep Templates, and Diagrams with GitHub' Copilot== ⭐ 95 [TYPESCRIPT CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An innovative open-source tool bridging declarative Bicep files, live Azure deployments, and system diagrams using GitHub Copilot. Standardizes validation processes during complex infrastructure-as-code planning.
💡 Explore Related: Terraform | Chef | Crossplane