One Command. Any Platform.
Cloud to Air-Gapped.
The open-source platform engineering framework for provisioning Kubernetes, OpenShift, KubeVirt, OpenStack on RHEL/Rocky Linux and EKS, GKE, AKS with Terraform.
Pure Platform Engineering. Zero Bloat.
Instead of a cluttered collection of random scripts, OpenIaC focuses exclusively on the industry-standard container, virtualization, and cloud platforms that power modern enterprises.
On-Premise & Air-Gapped Platforms (Ansible Engine)
Standard Kubernetes
Kubeadm · Containerd · Calico
CNCF-compliant upstream HA Kubernetes cluster with automated containerd SystemdCgroup tuning and CNI.
Lightweight Kubernetes
SUSE Rancher K3s
Single-binary Kubernetes optimized for edge computing, retail branches, and rapid local testbeds.
OpenShift / OKD
OKD (Default) · Red Hat OCP · Agent ISO
Unified enterprise PaaS supporting free open-source OKD and Red Hat OCP via the modern OpenShift 4.12+ Agent-based Installer with built-in VIPs.
Cloud-Native VM Virtualization
KubeVirt · CDI · Turnkey & Add-on
Turnkey all-in-one hypervisor or composable Layer-3 add-on for K8s, K3s, and OpenShift with full install/upgrade/uninstall lifecycle.
OpenStack Private Cloud
Kolla-Ansible · Containerized
Production-grade multi-node IaaS private cloud with automated Cinder LVM storage and Neutron networking.
Public Cloud Production Blueprints (Terraform Engine)
Amazon Web Services
Amazon EKS · Multi-AZ VPC · IAM
Production-ready AWS EKS blueprint provisioning a dedicated Multi-AZ VPC, IAM roles, and managed node groups.
Google Cloud Platform
Google GKE · Dedicated VPC
Modular Terraform blueprint for regional Google Kubernetes Engine clusters with custom subnetworks and node pools.
Microsoft Azure
Azure AKS · VNet · Managed Identity
Enterprise Azure Kubernetes Service architecture with isolated VNet subnets and SystemAssigned identity.
Designed for Zero-Knowledge UX
Even if you have never configured kernel modules, OpenShift Agent ISOs, or LVM storage groups before, OpenIaC handles the entire lifecycle automatically behind the scenes.
Sensible Defaults Out-of-the-Box
No need to edit dozens of YAML or HCL files. Every role and Terraform module ships with verified production defaults.
Built-in Invisible Helpers
OpenShift Agent ISO generation with nmstate & built-in VIPs, Cinder LVM volume groups, Neutron dummy interfaces, and KubeVirt emulation fallbacks are embedded automatically.
One-Command Execution
Run a single make target (e.g., make k8s or make aws-apply). Kubeconfigs and credentials are automatically configured for immediate use.
Enterprise Engineering Standards
Built on strict architectural guardrails for reliability across air-gapped data centers and public clouds.
100% Air-Gapped Ready
Modular packager scripts (make pack-<platform>) bundle all required RPMs, Python wheels, Galaxy collections, and container images into a single portable tarball.
RHEL / Rocky Linux Standardized
Engineered specifically for Enterprise Linux (RHEL / Rocky Linux) with dynamic version-open compatibility and zero external Ansible collection dependencies.
3-Layer Composable & Day-2 Ready
Every role decouples routing from lifecycle/engine modules (install_<method>.yml, uninstall_<method>.yml) for seamless upgrades, add-ons, and Vagrant validation.