ConfigMaps

$ kubectl exec deploy/organization-api -n hoa-staging -- printenv LOG_LEVEL
info
# ...even though the ConfigMap itself now reports:
$ kubectl get configmap organization-config -n hoa-staging -o jsonpath='{.data.LOG_LEVEL}'
debug

 data:
   LOG_LEVEL: {{ .Values.logLevel | default "info" | quote }}
   ORGANIZATION_HTTP_ADDR: ":8081"
   ORGANIZATION_INTERNAL_ADDR: ":9090"
+  HTTP_READ_TIMEOUT: "10s"
+  HTTP_WRITE_TIMEOUT: "15s"
   ENVIRONMENT: {{ .Values.environment | quote }}

// WatchLogLevel polls the mounted ConfigMap file every 5s and adjusts the
// running process's log level in place — no restart, no rollout, no
// checksum annotation involved, because this one setting is deliberately
// delivered by mounted file instead of environment variable.
// zerolog.SetGlobalLevel is what makes this achievable in one line: it is
// a single, process-wide filter every zerolog.Logger in this binary reads
// on each call, so flipping it here takes effect immediately for every
// logger already constructed, with nothing to plumb through and no
// per-logger handler to rebuild.
func WatchLogLevel(ctx context.Context, path string, logger zerolog.Logger) {
	ticker := time.NewTicker(5 * time.Second)
	defer ticker.Stop()
	var current string
	for {
		select {
		case <-ctx.Done():
			return
		case <-ticker.C:
			raw, err := os.ReadFile(path)
			if err != nil {
				continue // a transient read during kubelet's atomic symlink swap; next tick retries
			}
			level := strings.TrimSpace(string(raw))
			if level == current {
				continue
			}
			parsed, err := zerolog.ParseLevel(level)
			if err != nil {
				logger.Warn().Str("value", level).Msg("log level file contained an unrecognized value, ignoring")
				continue
			}
			zerolog.SetGlobalLevel(parsed)
			logger.Info().Str("from", current).Str("to", level).Msg("log level changed via mounted ConfigMap")
			current = level
		}
	}
}