diff --git a/CHANGELOG.md b/CHANGELOG.md
index 601f25f..64bd737 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -283,3 +283,11 @@
     - created to be applied in an account where a PHZ is maintained but shared to other accounts and VPCs.  This will be used by
       the dynamic route53 lambda to assume this role to enter the route53 records
     - must be done after addition to organization
+
+* 2.8.1 -- 2023-04-10
+  - subnets:
+    - enable availability_zones, to be able to select less than the full set of available zones (say, for do2-gov, where we had 2 but now they have
+      3 zones).
+    - fix up the cidr math
+    - this drops a new variables.subnets.tf for the examples, to include the optional availability_zones
+    - as we are nearing completion with updating all of the vpc code to TF 1.x, this should not be a problem, and it really only applies in do2-gov
diff --git a/examples/full-setup-tf-upgrade/variables.subnets.tf b/examples/full-setup-tf-upgrade/variables.subnets.tf
index 75f328b..3f9f4c3 100644
--- a/examples/full-setup-tf-upgrade/variables.subnets.tf
+++ b/examples/full-setup-tf-upgrade/variables.subnets.tf
@@ -2,17 +2,17 @@
 variable "public_subnets" {
   description = "List of objects with public subnet information to be created"
   type = list(object({
-    base_cidr         = string
-    label             = string
-    bits              = number
-    offset            = optional(number, 0)
-    private           = bool
-    tags              = map(string)
-    enabled           = optional(bool, true)
-    availability_zone = optional(string)
+    base_cidr          = string
+    label              = string
+    bits               = number
+    offset             = optional(number, 0)
+    private            = bool
+    tags               = map(string)
+    enabled            = optional(bool, true)
+    availability_zone  = optional(string)
+    availability_zones = optional(list(string), [])
     #      subnets     = list(string)
     #      labels      = list(string)
-    #      availability_zones = list(string)
   }))
   default = []
 }
@@ -21,17 +21,17 @@ variable "public_subnets" {
 variable "private_subnets" {
   description = "List of objects with private subnet information to be created"
   type = list(object({
-    base_cidr         = string
-    label             = string
-    bits              = number
-    offset            = optional(number, 0)
-    private           = bool
-    tags              = map(string)
-    enabled           = optional(bool, true)
-    availability_zone = optional(string)
+    base_cidr          = string
+    label              = string
+    bits               = number
+    offset             = optional(number, 0)
+    private            = bool
+    tags               = map(string)
+    enabled            = optional(bool, true)
+    availability_zone  = optional(string)
+    availability_zones = optional(list(string), [])
     #      subnets     = list(string)
     #      labels      = list(string)
-    #      availability_zones = list(string)
   }))
   default = []
 }