Entra id
GitOps Without PATs: Argo CD to Azure DevOps via Workload Identity
- Jonathan Aerts
- GitOps
- 14 Aug, 2026
TL;DR. Argo CD can authenticate to Azure DevOps repos with Entra Workload Identity instead of a PAT: a user-assigned managed identity, a federated credential bound to the `argocd-repo-server
read more
Deploying Azure Virtual Desktop End-to-End in a Landing Zone
- Jonathan Aerts
- Azure Virtual Desktop
- 01 Jul, 2026
TL;DR. This is the deployment walkthrough for a fully private, Entra-only Azure Virtual Desktop environment inside a regulated Azure Landing Zone. Pooled Windows 11 multi-session on a **cust
read more
Azure Virtual Desktop in a regulated Landing Zone: the traps no doc tells you about
- Jonathan Aerts
- Azure Virtual Desktop
- 20 Jun, 2026
TL;DR. Deploying Azure Virtual Desktop fully private in a Landing Zone (Private Endpoints everywhere, Palo Alto NVA for egress, centralised DNS) works very well — once you know about a dozen
read more