Azure devops
GitOps Without PATs: Argo CD to Azure DevOps via Workload Identity
- Jonathan Aerts
- GitOps
- 14 Aug, 2026
TL;DR. Argo CD can authenticate to Azure DevOps repos with Entra Workload Identity instead of a PAT: a user-assigned managed identity, a federated credential bound to the `argocd-repo-server
read more
The First Apply Is Local (and That's Fine)
- Jonathan Aerts
- Landing Zone
- 14 Aug, 2026
TL;DR. The deployment chain that applies your IaC is itself infrastructure — and something has to create it first. Instead of hand-building the pipeline chain before the code could run, we appli
read more
Running a 79-Module Terraform Library Like a Product
- Jonathan Aerts
- Landing Zone
- 14 Aug, 2026
TL;DR. A shared Terraform module library has two possible futures: product or landfill. Ours holds 79 modules consumed live from main by four landing zones — no pinning. The only reason th
read more