os-net-config/etc/os-net-config/samples/bridge_fail_mode.yaml

network_config:
  -
    type: ovs_bridge
    name: br-ctlplane
    use_dhcp: true
    ovs_fail_mode: secure
    members:
      -
        type: interface
        name: em1