Show HN: Infrawrench, A tool to manage cloud and svcs with workflows and chat

Connect your provider accounts and Infrawrench discovers every resource in them, then gives you the tools to actually work on it: open an SSH terminal or a pod shell, run a query, browse a bucket, watch costs, and create new resources from typed forms, across 25+ providers, in one app instead of a dozen consoles.

Run it in your browser with nothing to install, or download the desktop app for macOS, Windows, and Linux and keep everything local, free and with no account required.

Click a feature to explore. Infrawrench brings together the tools you'd normally need a dozen different apps for.

Connect to 25+ cloud providers and manage hundreds of resource types from a single unified interface. Infrawrench discovers your infrastructure automatically and keeps it in sync every 30 seconds.

Launch full SSH terminals to any server directly from Infrawrench. No external client needed. On desktop, connections run locally. In the cloud web app, sessions are proxied securely through our WebSocket server.

Browse, inspect, and manage your Kubernetes clusters. Exec into pods, stream logs, import YAML manifests, and edit live configs. The web app proxies exec sessions so nothing runs locally.

A built-in SQL editor with schema autocomplete, per-resource connection management, and support for a wide range of databases: from traditional PostgreSQL to serverless edge databases.

A built-in object storage file browser for S3, GCS, Cloudflare R2, Azure Blob Storage, and DigitalOcean Spaces. Upload, download, create folders, and delete, without leaving the app.

Build custom dashboards by pinning any resource from any provider. Cards show live stats and status. Set metric thresholds and get native OS notifications when something goes out of range.

View, rotate, and export secrets from AWS Secrets Manager, GCP Secret Manager, Azure Key Vault, and more. Credentials are encrypted at rest and only decrypted on demand.

Provision VMs, Kubernetes clusters, databases, queues, and buckets with a guided form backed by live data from the provider API. Includes real-time cost estimation, region and size pickers, and SSH key selection.

Terminal sessions are proxied through our WebSocket server: shell into EC2, GCE, Droplets, or Hetzner boxes, exec into pods, stream logs, and tunnel a database through a bastion. No VPN, no local SSH client, no kubeconfig file.

Invite teammates into an organization and share every account, dashboard, and budget. Roles and permissions decide who can read, who can act, and who can hold the credentials.

Budget and resource pages route to Slack, Microsoft Teams, and push notifications on the Infrawrench mobile app, instead of an OS notification on a laptop that is closed.

Every action is recorded against a user. Issue scoped API keys and drive the same HTTP API from nine generated client SDKs. Audit log and API keys are on the paid plan.

The same app in any browser, always on the latest version, plus an iOS and Android companion for dashboards, resources, chat, and terminals while you are on call.

Every resource exposes typed outputs: IPs, connection strings, tokens, kubeconfigs, and more. Wire them as inputs to other resources so everything stays resolved automatically.

Databases expose a connectionString output. Link it directly to the SQL editor and it connects automatically. No copy-pasting credentials.

Compute resources expose publicIp and privateIp outputs. Infrawrench uses these to open an SSH terminal with one click. No manual host entry.

Managed K8s clusters (EKS, GKE, AKS, DOKS) expose a kubeconfig output that automatically links to the Kubernetes plugin, so pods, services, and deployments appear without any manual setup.

IAM users, service accounts, and app registrations expose credential outputs. Download as JSON, env files, or Kubernetes secrets, or reference them directly from other resources.

Connect outputs from any AWS resource into another context. An RDS endpoint drives the SQL editor directly, or feed an EKS kubeconfig to the Kubernetes plugin, without touching config files.

Object storage resources (S3, R2, GCS, Azure Blob) generate scoped access tokens on demand so the in-app file browser operates without storing long-lived credentials.

24 providers · 225+ resource types across cloud, infrastructure, databases, and more.

Local-first and free. Credentials stay encrypted on your machine, and no account is required. Prefer nothing to install? Use the cloud app instead →