Version: v25.1.3

Update Environment Configuration

Configuring the environment.

This runbook covers how environment configuration is safely stored, how to change it, and how to apply changes.

Downtime Impact

Type	Services Affected	Estimated Downtime	Apply with
Major OpenStack settings (for example: enabling a new service or node)	All OpenStack services	~20–40 min	`--tags openstack`
Minor OpenStack settings (for example: VIP address, TLS certificates)	Affected OpenStack services only (brief container restart)	~5–10 min	`--reconfigure`
Management cluster, observability, and remote metrics variables	Management cluster (K3s), iaas-console, phoenix-observability, remote metrics scraper	~10–20 min	`--update`
New default settings, glance images	Glance (images), Nova (flavors/quotas), Neutron (networks/bgp); optionally Ironic, Magnum, Designate (if enabled)	~1–40 min	`--tags provision`

Secrets in the inventory (passwords, IPMI credentials, API keys) are Ansible Vault-encrypted.

To view an encrypted variable:

ansible-vault view inventory.yml

To rotate the vault password:

ansible-vault rekey --ask-vault-pass --ask-new-vault-pass inventory.yml

Edit inventory.yml with the new value.
Re-encrypt if you changed a secret block.
Apply with the appropriate option (see table).
```
platform-setup.sh $OPTION
```

Verify services:

platform-setup.sh --check

platform-setup.sh --shell
openstack service list
openstack endpoint list