arn-infra — Claude Code plugin: what it does, how to install
Generates Dockerfiles, IaC manifests, and CI/CD pipelines inside Claude Code. Useful for setting up cloud infrastructure, secrets, and deployment workflows.
/plugin marketplace add anthropics/claude-plugins-community
/plugin install arn-infra@claude-communityWhat arn-infra does
The plugin expands Claude Code with 23 infrastructure skills and 9 specialized agents. It audits local toolchains, writes Dockerfiles, and generates IaC templates for OpenTofu, Pulumi, or AWS CDK. It also structures environment configs, secrets, and CI/CD workflows, providing a dedicated change management pipeline for complex updates.
Everything runs directly on your local machine. The plugin does not collect telemetry and relies on pre-installed command-line tools like aws, kubectl, or docker with existing credentials. The developer tags this project as experimental. You must review generated manifests and deployment commands before running them against production environments.
What it helps with
- generate Dockerfiles for project containerization
- write IaC definitions for OpenTofu, Pulumi, or AWS CDK
- build CI/CD pipelines for automated deployments
- audit existing development and infrastructure toolchains
- configure environment variables and secrets
Example prompts for the agent
- Audit our toolchain and generate a Dockerfile for this service
- Create OpenTofu manifests to deploy the database and API
- Build a CI/CD pipeline with secret checks and deployment steps
How to install arn-infra
Plugin marketplace
/plugin marketplace add anthropics/claude-plugins-community/plugin install arn-infra@claude-communityStep by step, with commands for each platform: Claude Code plugins: marketplaces, installing, and building your own
Questions about arn-infra
How to install arn-infra in Claude Code?
Run both commands in sequence within Claude Code: first add the marketplace using /plugin marketplace add anthropics/claude-plugins-community, then install the package with /plugin install arn-infra@claude-community.
What does arn-infra do?
It automates toolchain audits, creates Dockerfiles, generates IaC manifests for OpenTofu, Pulumi, or AWS CDK, and sets up CI/CD deployment pipelines.
Does arn-infra store or send cloud credentials externally?
No, the plugin operates locally and does not collect or transmit credentials. It invokes your local CLI tools such as aws, gcloud, or kubectl directly with their existing system authentication.
Source text
arn-infra · MIT
# Arness Infra Infrastructure and deployment plugin for Claude Code. Audits your toolchain, generates Dockerfiles and IaC (OpenTofu, Pulumi, AWS CDK), configures environments and secrets, builds CI/CD pipelines, and walks you through deployment and verification. For complex changes, a structured change management pipeline mirrors the rigor of the development pipeline. Ships 23 infrastructure skills and 9 specialist agents. > **Experimental — use with care.** Always review generated infrastructure configurations and deployment commands before applying them to real environments. Test in non-production environments first. ## Install ``` # Add the Arness marketplace (one-time) /plugin marketplace add AppsVortex/arness # Install this plugin /plugin install arn-infra@arn-marketplace ``` ## Documentation Full guide: [docs/plugins/arn-infra.md](../../docs/plugins/arn-infra.md) · [arness.appsvortex.com](https://arness.appsvortex.com/) ## License MIT. See [LICENSE](./LICENSE). ## Privacy Arness Infra runs entirely inside Claude Code on your local machine. The plugin emits no telemetry, collects no usage data, and transmits nothing off-device on its own — all skills and agents operate on files in your working directory. Claude Code (the host harness) handles its own Anthropic API communication; refer to [Anthropic's privacy policy](https://www.anthropic.com/legal/privacy) and [Claude Code's data usage documentation](https://code.claude.com/docs/en/data-usage) for details on how the host processes your prompts and context. Cloud CLIs (`aws`, `gcloud`, `az`, `kubectl`, `tofu`, `pulumi`, `cdk`, `docker`, and similar) and optional MCP integrations are invoked locally using your existing credential configuration — the plugin does not intermediate, store, or forward credentials, and any API calls those tools make go directly from your machine to the respective cloud or service provider.
© AppsVortex · MIT · AppsVortex/arness
