Trusted by Estonian Public Broadcasting, the Health and Welfare Information Systems Centre, and the Estonian Information System Authority.
🗓️ Weekly module updates 🧪 Tested nightly on live AWS and GCP accounts 🏆 In production since 2020.
Don't write or wire the infrastructure yourself.
Across the production projects we've migrated, the IaC codebase shrank by 88% and thousands of lines collapse to a few hundred.
Patching CVEs is constant work. We ship weekly updates.
Apply them when you're ready, instead of developing, testing and rolling out each patch yourself.
New features land in the open-source release as Infralib evolves.
Adopt them on your schedule, without funding the development yourself.
One compliant codebase
The end of the per-team fork
Different teams want different clouds, different security policies, different in-house tools. For years the only answer was forking the platform template per team and paying to maintain every fork. Infralib gives you one codebase that adapts to each:
- Runs on AWS and Google Cloud
- Extends to on-premise environments like VMware, Nutanix and OpenStack
- Serves regulated industries without abandoning the shared codebase
The cloud underneath can change. Your operating model doesn't
Cloud providers ship components, not platforms. Infralib wraps them in an opinionated open-source layer so your operations are not dependent on which cloud sits underneath.
- Place workspaces in the clouds and regions your regulations require.
- Spread critical workloads across providers.
- Use vendor-specific services when they earn it: as a deliberate choice, not a default.
Security you inherit, not implement
Infralib ships with security controls that most teams spend months implementing manually.
- Pod Security Admission enforces secure deployment practices across all workloads.
- Infralib meets the Estonian Information Security Standard (E-ITS) requirements for Very High data protection classification
- The default configuration exceeds 70% of the CIS AWS Benchmark out of the box.
Treat infrastructure like a software project
Forking platform templates is fast on day one and unaffordable on day five hundred. Infralib brings the patterns software engineers use (libraries, interfaces, dependency injection) to platform engineering.
Dependency injection: the wiring
Modules connect to each other automatically. Turn on AWS KMS, and Kubernetes uses it for all Persistent Volumes. Provision a VPC, and its subnets flow into the EKS module. You describe intent, not glue code.
What's in the box
Infralib is an open-source platform distribution. Think of it as a Linux distribution or Homebrew for cloud infrastructure. It installs, configures and updates the open-source applications and cloud services that make up your Kubernetes platform, and wires them together so they work as one system.
Kubernetes for container orchestration
ArgoCD for GitOps
OpenTelemetry for logs, metrics and tracing
Crossplane for cloud resource provisioning
Managed open-source services: PostgreSQL, MariaDB, Valkey, Kafka, RabbitMQ
DNS & TLS orchestration
Integrates with your cloud infrastructure
Infralib is opinionated by default and customizable when your needs evolve. Every integration point is built on a standard interface so you can adopt the defaults or plug in what your organization already uses.
Typed module contracts
Modules declare structured inputs and outputs through typed contracts. The Infralib agent validates compatibility and wires dependencies automatically. Replace any module with a custom implementation that satisfies the same contract. The rest of the platform continues to work without changes.
Cloud-agnostic service APIs
One interface for managed open-source services like PostgreSQL and Valkey, regardless of which cloud runs them underneath. Applications talk to the API, not the cloud. Change providers or move between clouds without rewriting application configuration.
OpenTelemetry-based observability
Metrics, logs and traces are collected through OpenTelemetry, the industry standard for observability instrumentation. Route telemetry to the backend your organization already operates, whether that is Datadog, Splunk, or your own Grafana stack. Infralib handles collection and instrumentation; you choose where the data goes.
Standard identity providers
OpenID Connect integration across the platform. Plug in your existing identity provider: Entra ID, Okta, Google Workspace, or any OIDC-compliant service for single sign-on without a proprietary auth layer.
How Infralib compares
| Infralib | DIY (Terraform + Helm + ArgoCD) |  |  | |
|---|---|---|---|---|
| Day one | Pre-wired Kubernetes platform: observability, GitOps, DNS/TLS, SSO | Empty repo | Curated commercial K8s platform with Red Hat's stack | K8s management plane with a curated app catalog |
| Ongoing updates | Weekly upstream releases you adopt when ready | You patch CVEs and upgrade components yourself | Red Hat-controlled release cadence and supported versions | SUSE-controlled releases; community channels available |
| Customization | Override or replace any module; rest of platform unchanged | Total control, total ownership | Operator framework, within the Red Hat ecosystem | Helm-based catalog; broader stack flexibility than OpenShift |
| License | AGPL-3.0 | Free (component licenses vary) | Commercial (open-source core) | Apache 2.0 core; commercial support tier |
| Best match | If you operate multi-tenant or multi-cloud platforms and want a working platform on day one without funding the plumbing yourself | If you have the headcount and strong opinions about every layer of your platform | If you want an opinionated commercial Kubernetes platform with enterprise support and a single vendor on the contract | If you want a multi-cloud Kubernetes management plane with a curated application catalog |
Infralib is free to use under the AGPL
Start with the modules, run the agent, and have a working platform in under a day.
info@entigo.com | (+372) 600 6130 | Veerenni 40a, Tallinn, 10138