diff --git a/gerrit/acls/openstack-infra/release-tools.config b/gerrit/acls/openstack-infra/release-tools.config
index 5396e8b8f1..92d16f6ad6 100644
--- a/gerrit/acls/openstack-infra/release-tools.config
+++ b/gerrit/acls/openstack-infra/release-tools.config
@@ -8,6 +8,7 @@ pushSignedTag = group release-tools-core
 
 [receive]
 requireChangeId = true
+requireContributorAgreement = true
 
 [submit]
 mergeContent = true