diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4e17d6b0785ed1d50b62221f2861e4c6a6e59554..80fbe562fa8349ec9ecc6fe935d33929dc6c44a1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## 2.2.0 - 2023-08-07
+
+### Removed
+- removed nodeports in securitygroup
+
 ## 2.1.1 - 2023-08-03
 
 ### Changed
diff --git a/terraform/modules/rke1/security_group.tf b/terraform/modules/rke1/security_group.tf
index 48629e157665af3627b9a4bd21b24f0dd1445fff..d41e597224c537ece52463dd259324aa0835b4c2 100644
--- a/terraform/modules/rke1/security_group.tf
+++ b/terraform/modules/rke1/security_group.tf
@@ -86,19 +86,6 @@ resource "openstack_networking_secgroup_rule_v2" "ingress_kubeapi" {
   depends_on        = [openstack_networking_secgroup_v2.cluster_security_group]
 }
 
-# Ingress IPv4  TCP 30000 - 32767 0.0.0.0/0 - nodeport
-# DEPRECATED
-resource "openstack_networking_secgroup_rule_v2" "ingress_nodeport" {
-  description       = "nodeport"
-  direction         = "ingress"
-  ethertype         = "IPv4"
-  protocol          = "tcp"
-  port_range_min    = 30000
-  port_range_max    = 32767
-  security_group_id = openstack_networking_secgroup_v2.cluster_security_group.id
-  depends_on        = [openstack_networking_secgroup_v2.cluster_security_group]
-}
-
 resource "openstack_networking_secgroup_rule_v2" "same_security_group_ingress_tcp" {
   direction         = "ingress"
   ethertype         = "IPv4"