Skip to main content
osinfra.io

A team-first, open source reference implementation for building and managing cloud infrastructure — built on vendor-light, open-source tooling.

🔐

Security by default, not bolt-on

Every GCP project is automatically CIS GCP Foundation Benchmark compliant. Audit logging, encrypted log sinks, KMS-encrypted state, zero default VPCs — making the right things the easiest things to do.

📦

Built on open standards

Every layer of the stack uses CNCF and open-source projects — Kubernetes, Istio, cert-manager, OPA Gatekeeper, OpenTofu. No proprietary abstractions, no lock-in, no black boxes.

🤖

Team onboarding in minutes

AI-assisted onboarding creates GCP projects, identity groups, GitHub repos, and Kubernetes namespaces from a single conversation — producing a reviewed pull request, not a support ticket.

Your team, on the platform in minutes

The Logos Agent handles the full onboarding conversation and opens a pull request with every change — GCP folder hierarchy, identity groups, GitHub teams, Datadog team, and repositories. No YAML to write by hand, no support ticket to file.

Onboard your team →
/agent → Logos Agent

👋 Hi! I'm the Logos Agent. I help manage everything on the osinfra.io platform — teams, members, repositories, environments, and more.

Give me just a moment while I look you up…

✓ Identity validated · joe@osinfra.io

It looks like you're not part of any team yet — welcome! Would you like to join an existing team or onboard a new team from scratch?

Onboard a new team — st-fides

Based on your team key I'd suggest Fides as the display name — it appears in Google Cloud Platform, GitHub, and Datadog. Does that work?

✓ Stream-aligned team detected (st- prefix)

What email address should be the Datadog team admin?

joe@osinfra.io — and use my GitHub username as the team maintainer.

Here's what I'll create:

  • 📁 GCP folder hierarchy — Fides (Sandbox / Non-Production / Production)
  • 👥 Google Identity groups — admin, reader, writer
  • 🐙 GitHub parent team + 4 child teams (sandbox-approvers, non-production-approvers, production-approvers, repository-administrators)
  • 🐶 Datadog team — Fides

Ready to open the pull request on pt-logos?

🗺️

Explore the Platform

Understand the team topology — how the platform is organized, what each team owns, and how the layers fit together.

See the teams →
🧩

Browse the Modules

Eleven reusable OpenTofu modules covering GCP projects, networking, GKE, Istio, cert-manager, OPA Gatekeeper, and more.

View the modules →
💻

View the Source

Everything is open source. Explore the repositories, open issues, and contribute to the platform.

Browse on GitHub →