diff --git a/defaults/openstack/policy/keystone.yml b/defaults/openstack/policy/keystone.yml
new file mode 100644
index 0000000..0b0f9c2
--- /dev/null
+++ b/defaults/openstack/policy/keystone.yml
@@ -0,0 +1,6 @@
+classes:
+- system.defaults.openstack.policy.all
+parameters:
+  keystone:
+    server:
+      policy: ${_param:keystone_default_policy_${_param:openstack_version}}