diff --git a/CHANGELOG.md b/CHANGELOG.md
index b82a98b75186d5742d7a6aab4067dfc66b321635..4e17d6b0785ed1d50b62221f2861e4c6a6e59554 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## 2.1.1 - 2023-08-03
+
+### Changed
+- use /32 instead of /16 for rancher ips
+
 ## 2.1.0 - 2023-08-03
 
 In the next major update all backwards compatible code will be removed. Please migrate to teh cluster_machine setup and set controlplane_count and worker_count to 0
diff --git a/terraform/modules/rke1/variables.tf b/terraform/modules/rke1/variables.tf
index 975fbd89ad5a1b65f90f700613625964afff643f..be78d7082e47be6398a6baaf71b98b11dcee7387 100644
--- a/terraform/modules/rke1/variables.tf
+++ b/terraform/modules/rke1/variables.tf
@@ -143,9 +143,9 @@ variable "openstack_security_kubernetes" {
   type        = map(any)
   description = "IP address to allow connections to kube api port, default is rancher nodes"
   default = {
-    "rancher-1" : "141.142.218.167/16"
-    "rancher-2" : "141.142.217.171/16"
-    "rancher-3" : "141.142.217.184/16"
+    "rancher-1" : "141.142.218.167/32"
+    "rancher-2" : "141.142.217.171/32"
+    "rancher-3" : "141.142.217.184/32"
   }
 }