Welcome to meshStack Hub
A central hub for open-source building block definitions and platform configurations that integrate seamlessly with meshStack. Discover Terraform modules for AWS, Azure, GCP, and moreβdesigned for consistent, secure, and efficient cloud automation.
Azure
Cloud services by Microsoft
Amazon Web Services
Amazon's scalable cloud platform

Google Cloud
Cloud solutions by Google

GitHub
Version control platform
Azure DevOps
DevOps tools and services by Microsoft
Azure Kubernetes Service
Managed Kubernetes service on Azure

Cloud Foundry
Open-source cloud application platform

DataDog
Monitoring and analytics platform

IONOS
European cloud and hosting provider

Kubernetes
Container orchestration platform

OpenShift
Enterprise Kubernetes platform by Red Hat

OpenStack
Open-source cloud infrastructure platform

OVHcloud
European cloud service provider

SAP Business Technology Platform
SAP's platform-as-a-service solution

STACKIT
Cloud platform by Schwarz IT

Tencent Cloud
Cloud services by Tencent
All Building Block Definitions
Building block definitions are pre-configured Terraform modules for automating cloud tasks. Application teams can easily use them to simplify and accelerate their workflows.

GitHub Actions Integration with AKS
CI/CD pipeline using GitHub Actions for secure, scalable AKS deployment.

PostgreSQL Integration with AKS
Provides managed PostgreSQL with direct integration to AKS for secure access.

AKS Starterkit
The AKS Starterkit provides application teams with a pre-configured Kubernetes environment. It includes two Kubernetes namespaces (dev&prod), a Git repository, a CI/CD pipeline using GitHub Actions, and a secure container registry integration.

Agentic Coding Sandbox
A composition building block that provides developers with a sandboxed AWS environment to access agentic coding tools like Claude via AWS Bedrock, with automatic budget alerts and region enablement for AI model access.

AWS Budget Alert
Sets up budget alerts for an AWS account to monitor spending and prevent cost overruns.

Enable Opt-In Regions
The building block enables you to enable AWS regions that require explicit opt-in for your AWS account. This is particularly useful for managing access to newer AWS regions or regions with specific compliance requirements.

AWS S3 Bucket
Provides an AWS S3 bucket for object storage with access controls, lifecycle policies, and encryption.

AKS Cluster
Provision a production-grade Azure Kubernetes Service (AKS) cluster with Azure AD, OIDC, Workload Identity, Log Analytics and custom VNet using Terraform.

Azure Bastion Host
Provides secure RDP and SSH connectivity to virtual machines in Azure virtual networks without exposing them to the public internet, with comprehensive monitoring and alerting.

Azure Virtual Machine
(ALPHA) Provisions an Azure Virtual Machine (VM) with support for both Linux and Windows operating systems, including network interface, optional public IP, network security group, and optional data disk.

Azure Virtual Machine Starterkit
The Azure Virtual Machine Starterkit provides application teams with a pre-configured Azure environment. It includes a dedicated project, an Azure tenant, and a virtual machine for quick provisioning and testing.

Azure Subscription Budget Alert
Sets up budget alerts for an Azure subscription to monitor spending and prevent cost overruns.

Azure Container Registry
Provides a production-grade Azure Container Registry for storing and managing Docker container images and OCI artifacts with private networking support.

Azure GitHub Actions Terraform Setup
Deploy directly to Azure using GitHub Actions and Terraform brought to you by meshStack

Role Assignments for GitHub Actions Terraform Setup
Helper building block used to assign the necessary Azure roles

Azure Key Vault
Provides an Azure Key Vault for secure storage and management of secrets, keys, and certificates with RBAC authorization, optional private endpoint support, and hub connectivity.

Azure PostgreSQL Deployment
Provides a managed Azure PostgreSQL database with scalability, security, and high availability.

Azure Service Principal
Creates an Entra ID application registration and service principal with role assignment for automated access to Azure resources

Spoke VNet
Provides VNet for your Azure subscription that's connected on a central network hub.

Azure Storage Account
Provides an Azure Storage Account as a highly scalable, durable, and secure container that groups together a set of Azure Storage services.

Azure Virtual Machine Scale Set
Creates an Azure Virtual Machine Scale Set (VMSS) with comprehensive configuration options for scalable, highly available compute infrastructure.

Azure DevOps Agent Pool
Creates an Azure DevOps agent pool connected to an existing Azure VMSS for elastic scaling of build agents.

Azure DevOps Pipeline
Provides a CI/CD pipeline in Azure DevOps linked to a repository with YAML-based configuration

Azure DevOps Project
Creates and manages Azure DevOps projects with user entitlements, stakeholder licenses, and role-based group memberships.

Azure DevOps Git Repository
Provides a Git repository in Azure DevOps with optional branch protection policies

Azure DevOps Service Connection (Subscription)
Provides an Azure subscription service connection in Azure DevOps for pipeline integration with Azure subscriptions


GCP Project Budget Alert
Sets up budget alerts for a GCP project to monitor spending and prevent cost overruns.


GCP Storage Bucket
Provides a GCP Cloud Storage bucket for object storage with access controls and lifecycle policies.


GitHub Repository Creation
Automates GitHub repository setup with predefined configurations and access control.


IONOS DCD (Data Center Designer)
Creates and manages IONOS Data Center Designer environments with user onboarding, role-based access control, and datacenter provisioning.


IONOS User Management
Creates and manages IONOS Cloud users with role-based access. This is a foundational module that should be deployed before DCD environments.


Kubernetes Service Account
Creates a Kubernetes service account with ClusterRole binding and generates a kubeconfig for authentication


SAP BTP subaccount
This building block Creates a subaccount in SAP BTP.


SAP BTP subdirectory
This building block Creates a subdirectory in SAP BTP.


StackIt Project
Creates a new StackIt project and manages user access permissions with role-based access control.