diff --git a/metadata/service/compute/single.yml b/metadata/service/compute/single.yml
index e1196b2..3422e39 100644
--- a/metadata/service/compute/single.yml
+++ b/metadata/service/compute/single.yml
@@ -17,6 +17,7 @@
       local_ip: ${_param:tenant_address}
       dvr: false
       external_access: false
+      security_groups_enabled: true
       metadata:
         host: ${_param:cluster_vip_address}
         password: ${_param:metadata_password}
diff --git a/metadata/service/control/single.yml b/metadata/service/control/single.yml
index 3be2831..24b5a2f 100644
--- a/metadata/service/control/single.yml
+++ b/metadata/service/control/single.yml
@@ -12,6 +12,7 @@
       fwaas: false
       dns_domain: novalocal
       tunnel_type: vxlan
+      security_groups_enabled: true
       version: ${_param:neutron_version}
       bind:
         address: ${_param:single_address}
diff --git a/metadata/service/gateway/single.yml b/metadata/service/gateway/single.yml
index 4ff30d1..a9628f0 100644
--- a/metadata/service/gateway/single.yml
+++ b/metadata/service/gateway/single.yml
@@ -17,6 +17,7 @@
       local_ip: ${_param:tenant_address}
       dvr: false
       external_access: True
+      security_groups_enabled: true
       metadata:
         host: ${_param:cluster_vip_address}
         password: ${_param:metadata_password}