https://ferkakta.dev/tags/eso/Recent content in Eso on ferkakta.devHugoen-USCopyright fizz.Wed, 25 Mar 2026 21:00:00 -0500https://ferkakta.dev/from-feature-flags-import-star/Wed, 25 Mar 2026 21:00:00 -0500https://ferkakta.dev/from-feature-flags-import-star/<p>A colleague needed a feature flag enabled on one tenant. <code>FEATURE_FLAG_ENABLE_AGENTS=True</code> — one environment variable, one pod. I added it to the K8s secret manually, restarted the pod, and he was unblocked in two minutes.</p> <p>Then I realized: the next terraform apply would overwrite that secret without the flag. The ExternalSecret syncs from SSM, and the flag wasn&rsquo;t in SSM through any path terraform knew about. My manual fix had a shelf life of one deploy.</p>