diff --git a/.github/workflows/stackhpc-all-in-one.yml b/.github/workflows/stackhpc-all-in-one.yml
index 1e19b5b53..8b67fec66 100644
--- a/.github/workflows/stackhpc-all-in-one.yml
+++ b/.github/workflows/stackhpc-all-in-one.yml
@@ -34,7 +34,7 @@ on:
       vm_interface:
         description: Default network interface name
         type: string
-        default: ens3
+        default: enp3s0
       vm_flavor:
         description: Flavor for the all-in-one VM
         type: string
diff --git a/doc/source/operations/secret-rotation.rst b/doc/source/operations/secret-rotation.rst
index 7912530fb..f3213da37 100644
--- a/doc/source/operations/secret-rotation.rst
+++ b/doc/source/operations/secret-rotation.rst
@@ -370,10 +370,12 @@ Full method
 
       kayobe overcloud service deploy
 
-20. Manually update ``heat_domain_admin_password``
+20. Manually update ``heat_domain_admin_password``, using the newly generated
+    OpenStack Admin credentials.
 
-    #. TODO: Instructions
-       This has not been tested yet
+    .. code:: bash
+
+       openstack user set --domain heat_user_domain --password <password> heat_domain_admin
 
 21. Re-run Tempest to make sure everything has come back
 
diff --git a/etc/kayobe/environments/ci-aio/inventory/group_vars/controllers/selinux b/etc/kayobe/environments/ci-aio/inventory/group_vars/controllers/selinux
new file mode 100644
index 000000000..97bfb5bb0
--- /dev/null
+++ b/etc/kayobe/environments/ci-aio/inventory/group_vars/controllers/selinux
@@ -0,0 +1,4 @@
+---
+# Configure SELinux to be disabled in all cases. This is a short term fix, we
+# want RL9 hosts to be be permissive but our host images need to be rebuilt.
+selinux_state: "disabled"