os-net-config/etc/os-net-config/samples/bridge_fail_mode.json

{ "network_config": [
        {
            "type": "ovs_bridge",
            "name": "br-ctlplane",
            "ovs_fail_mode": "secure",
            "use_dhcp": "true",
            "members": [
                {
                    "type": "interface",
                    "name": "em1"
                }
            ]
        }
    ]
}