diff --git a/metadata/service/api/cluster.yml b/metadata/service/api/cluster.yml
index efb647a..38b84e6 100644
--- a/metadata/service/api/cluster.yml
+++ b/metadata/service/api/cluster.yml
@@ -53,3 +53,10 @@
         user_domain_id: default
         project_domain_id: default
         protocol: 'http'
+      public_policy_override:
+        'public_api': 'is_public_api:False'
+      deploy_policy_override:
+        'admin_api': '!'
+        'public_api': 'is_public_api:True'
+        'is_observer': '!'
+        'is_admin': '!'
diff --git a/metadata/service/api/single.yml b/metadata/service/api/single.yml
index affaab3..ef0bb06 100644
--- a/metadata/service/api/single.yml
+++ b/metadata/service/api/single.yml
@@ -53,3 +53,10 @@
         user_domain_id: default
         project_domain_id: default
         protocol: 'http'
+      public_policy_override:
+        'public_api': 'is_public_api:False'
+      deploy_policy_override:
+        'admin_api': '!'
+        'public_api': 'is_public_api:True'
+        'is_observer': '!'
+        'is_admin': '!'