diff --git a/gerrit/acls/pyca/project-config.config b/gerrit/acls/pyca/project-config.config
new file mode 100644
index 0000000000..a8fcd4874c
--- /dev/null
+++ b/gerrit/acls/pyca/project-config.config
@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group opendev-project-config-core
+label-Code-Review = -2..+2 group opendev-project-config-core
+label-Workflow = -1..+1 group opendev-project-config-core
+
+[access "refs/tags/*"]
+pushSignedTag = group opendev-project-config-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 24d50eed34..b9526c0c46 100644
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -5641,6 +5641,8 @@
   description: An OpenStack fault injection library
 - project: performa/shaker
   description: Distributed data-plane performance testing tool
+- project: pyca/project-config
+  description: Project configuration for 3rd party CI for Python Crytographic Authority
 - project: recordsansible/ansible-role-ara
   use-storyboard: true
   description: Ansible role to install and set up ARA