diff --git a/releasenotes/notes/fix-ironic-valid-interface-4abe135a9ff5b38e.yaml b/releasenotes/notes/fix-ironic-valid-interface-4abe135a9ff5b38e.yaml
new file mode 100644
index 0000000..f3d275b
--- /dev/null
+++ b/releasenotes/notes/fix-ironic-valid-interface-4abe135a9ff5b38e.yaml
@@ -0,0 +1,4 @@
+---
+fixes:
+  - The Ironic agent for Neutron uses the ``internal`` API endpoint by default
+    to avoid hitting the public endpoint unnecessarily.
diff --git a/roles/neutron/vars/main.yml b/roles/neutron/vars/main.yml
index 4388610..000d703 100644
--- a/roles/neutron/vars/main.yml
+++ b/roles/neutron/vars/main.yml
@@ -50,6 +50,8 @@
         password: "{{ openstack_helm_endpoints_neutron_keystone_password }}"
       nova:
         live_migration_events: true
+      ironic:
+        valid_interfaces: internal
       placement:
         region_name: "{{ openstack_helm_endpoints_neutron_region_name }}"
         username: "neutron-{{ openstack_helm_endpoints_neutron_region_name }}"