In this section
What's pre-integrated — and why
ExplanationPublic
The problem this solves
Building a secure, compliant DevSecOps platform from scratch means integrating 40–60 tools. Each needs to talk to every other, be hardened to your compliance baseline, packaged for air-gap delivery, and maintained when a CVE drops. Doing this yourself takes 6–18 months.
SmoothGlue ships all of it pre-integrated, pre-hardened, and pre-tested.
How pre-integration works
When you run smoothglue install, the CLI:
- Pulls a Zarf package containing all selected apps and their dependencies — no internet required after this step
- Deploys each app using its tested Helm chart
- Wires apps to the Keycloak SSO instance automatically — GitLab, ArgoCD, and Mattermost all use the same identity provider with no manual OAuth configuration
- Applies Kyverno policies to enforce zero-trust network rules between all apps
- Configures the observability stack to scrape metrics from every app automatically
What SmoothGlue handles for you
| Category | Tools | What you don't configure |
|---|---|---|
| Source Control | GitLab | OAuth2 to Keycloak, GitLab Runner, Iron Bank image pull |
| CI/CD | ArgoCD, GitLab CI | ArgoCD RBAC, GitOps repo sync, pipeline templates |
| Identity | Keycloak | SSO for all apps, FIPS-compliant login |
| Artifact Registry | Nexus | Pull-through cache, Iron Bank proxy |
| Observability | Prometheus, Grafana, Loki, Tempo, Alloy | All scrape configs, dashboards, alert rules |
| Security | Kyverno, NeuVector, AuthService | Zero-trust network policy, runtime behavioral analysis |
| Secrets | Vault | Vault-Agent sidecar injection, lease management |
| Collaboration | Mattermost | SSO, notifications, webhook wiring |
| Air-gap delivery | Zarf | Package creation, offline install, image mirroring |
What you still own
- Your application code and its Helm charts
- Your domain names and TLS certificates
- Your AWS/GCP/Azure account and IAM permissions
- Your application-specific secrets (database passwords, API keys — stored in Vault, but created by you)