diff --git a/ansible/roles/network-redhat/tasks/main.yml b/ansible/roles/network-redhat/tasks/main.yml
index 27aa92d70..2ff5b5c8f 100644
--- a/ansible/roles/network-redhat/tasks/main.yml
+++ b/ansible/roles/network-redhat/tasks/main.yml
@@ -46,3 +46,4 @@
     name: veth
   vars:
     veth_interfaces: "{{ network_interfaces | net_ovs_veths }}"
+  when: "'overcloud' in group_names"
diff --git a/releasenotes/notes/patch-links-on-overcloud-e24dbc858d3399cc.yaml b/releasenotes/notes/patch-links-on-overcloud-e24dbc858d3399cc.yaml
new file mode 100644
index 000000000..d5137eca5
--- /dev/null
+++ b/releasenotes/notes/patch-links-on-overcloud-e24dbc858d3399cc.yaml
@@ -0,0 +1,6 @@
+---
+fixes:
+  - |
+    Fixes an issue where patch links could be erroneously created
+    on hosts not in the overcloud group. See `Story 2009911
+    <https://storyboard.openstack.org/#!/story/2009911>`__ for details.