Hello everyone

I'm trying to setup openstack cluster with openvswitch, following the guide in link below

https://docs.openstack.org/neutron/yoga/admin/deploy-ovs-selfservice.html

Diagram in the link above states that compute nodes should have three interfaces(management, overlay and provider)

My question is, do I really need separated management network and overlay network? (I only have two switches)

It seems like overlay traffic between VMs in virtual network are encapsulated with GENEVE, will not escape to management network.

Is there any possible security risk of using the same network for both overlay and management? (not performance concerns but security)

Thank you in advance!