diff --git a/gerrit/acls/openstack/ansible-collections-openstack.config b/gerrit/acls/openstack/ansible-collections-openstack.config
index a50a15e1ea..d588738140 100644
--- a/gerrit/acls/openstack/ansible-collections-openstack.config
+++ b/gerrit/acls/openstack/ansible-collections-openstack.config
@@ -18,6 +18,9 @@ label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group ansible-collections-openstack-stable-maint
 label-Workflow = -1..+1 group stable-maint-core
 
+[access "refs/tags/*"]
+pushSignedTag = group ansible-collections-openstack-release
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = false