---
fixes:
  - |
    Previously access to the sshd running by the nova-migration-target
    container is only limited via the sshd_config. While login is
    not possible from other networks, the service is reachable via
    all networks. This change limits the access to the NovaLibvirt
    and NovaApi networks which are used for cold and live-migration.