PCI passthrough with Microstack

According to https://docs.openstack.org/nova/2024.1/admin/pci-passthrough.html, both nova-api and nova-compute need to know about the device alias for PCI passthrough, by appending to nova.conf or dropping into nova.conf.d/.

In Microstack, controller node is deployed in Terraform-planned Kubernetes pods by Juju, and nova-k8s exposes no extra config options, as is also confirmed in the nova.conf template.

I can kubectl exec into the container to modify the config but what would be the intended/correct way to accomplish this in production Microstack?