diff --git a/playbooks/releasenotes/pre.yaml b/playbooks/releasenotes/pre.yaml
new file mode 100644
index 0000000000..af3b95c08e
--- /dev/null
+++ b/playbooks/releasenotes/pre.yaml
@@ -0,0 +1,4 @@
+- hosts: all
+  roles:
+    - ensure-reno
+    - revoke-sudo
diff --git a/playbooks/releasenotes/run.yaml b/playbooks/releasenotes/run.yaml
index a2839d4ab2..116c6888df 100644
--- a/playbooks/releasenotes/run.yaml
+++ b/playbooks/releasenotes/run.yaml
@@ -1,4 +1,3 @@
 - hosts: all
   roles:
-    - ensure-reno
     - build-releasenotes
diff --git a/zuul.d/jobs.yaml b/zuul.d/jobs.yaml
index 418c6bb5cc..690f5a1ad9 100644
--- a/zuul.d/jobs.yaml
+++ b/zuul.d/jobs.yaml
@@ -288,6 +288,7 @@
       Publish the results of build-openstack-releasenotes to
       /afs/.openstack.org/docs/releasenotes/{{ zuul.project.short_name }}
     final: true
+    pre-run: playbooks/releasenotes/pre.yaml
     run: playbooks/releasenotes/run.yaml
     post-run: playbooks/publish/releasenotes.yaml
     override-branch: master