add the false case

doc/src/pages/cpd-design/objects/openshift.mdx

@@ -93,7 +93,7 @@ openshift:
 | infrastructure.subnets  | List of subnets within the VPC to use. Either 1 or 3 subnets must be specified            | Yes            | Existing subnet        |
 | infrastructure.cos_name | Reference to the `cos` object created for this cluster                                    | Yes            | Existing cos object    |
 | infrastructure.private_only | If true, it indicates that the ROKS cluster must be provisioned without public endpoints            | No             | True, False (default)  |
-| infrastructure.deny_node_ports | If true, the Allow ICMP, TCP and UDP rules for the security group associated with the ROKS cluster must be removed            | No             | True, False (default)  |
+| infrastructure.deny_node_ports | If true, the Allow ICMP, TCP and UDP rules for the security group associated with the ROKS cluster are removed if present. If false, the Allow ICMP, TCP and UDP rules are added if not present.             | No             | True, False (default)  |
 | openshift_logging[]     | Logging attributes for OpenShift cluster, see [OpenShift logging](#openshift-logging)     | No             |                        |
 | upstream_dns[]          | Upstream DNS servers(s), see [Upstream DNS Servers](#upstream-dns-servers)                | No             |                        |
 | openshift_storage[]     | List of storage definitions to be defined on OpenShift, see below for further explanation | No             |                        |