diff --git a/gerrit/acls/openstack/ansible-role-sudoers.config b/gerrit/acls/openstack/ansible-role-sudoers.config
new file mode 100644
index 0000000000..09c648c675
--- /dev/null
+++ b/gerrit/acls/openstack/ansible-role-sudoers.config
@@ -0,0 +1,14 @@
+[access "refs/heads/*"]
+abandon = group ansible-role-sudoers-core
+label-Code-Review = -2..+2 group ansible-role-sudoers-core
+label-Workflow = -1..+1 group ansible-role-sudoers-core
+
+[access "refs/tags/*"]
+pushSignedTag = group ansible-role-sudoers-release
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 8d24e409e6..0029902a24 100755
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -822,6 +822,9 @@
   description: Ansible role to manage Shade
 - project: openstack/ansible-role-ssh
   description: Ansible role to manage SSH
+- project: openstack/ansible-role-sudoers
+  description: Ansible role to manage Sudoers
+  upstream: https://github.com/pabelanger/ansible-role-sudoers.git
 - project: openstack/ansible-role-virtualenv
   description: Ansible role to manage Virtualenv
 - project: openstack/ansible-role-zookeeper
diff --git a/gerritbot/channels.yaml b/gerritbot/channels.yaml
index 8132059588..63e5139a9d 100755
--- a/gerritbot/channels.yaml
+++ b/gerritbot/channels.yaml
@@ -2391,6 +2391,7 @@ openstack-windmill:
     - openstack/ansible-role-nodepool
     - openstack/ansible-role-shade
     - openstack/ansible-role-ssh
+    - openstack/ansible-role-sudoers
     - openstack/ansible-role-virtualenv
     - openstack/ansible-role-zookeeper
     - openstack/ansible-role-zuul
diff --git a/jenkins/jobs/projects.yaml b/jenkins/jobs/projects.yaml
index a664a6c9de..79c05cb321 100644
--- a/jenkins/jobs/projects.yaml
+++ b/jenkins/jobs/projects.yaml
@@ -111,6 +111,13 @@
       - ansible-role-jobs
       - hook-{name}-rtfd
 
+- project:
+    name: ansible-role-sudoers
+
+    jobs:
+      - ansible-role-jobs
+      - hook-{name}-rtfd
+
 - project:
     name: ansible-role-virtualenv
 
diff --git a/zuul/layout.yaml b/zuul/layout.yaml
index 3ae4766975..a379d4f855 100755
--- a/zuul/layout.yaml
+++ b/zuul/layout.yaml
@@ -5162,6 +5162,19 @@ projects:
       - name: windmill-jobs-trusty
       - name: windmill-jobs-xenial
 
+  - name: openstack/ansible-role-sudoers
+    template:
+      - name: merge-check
+      - name: ansible-role-jobs
+      - name: ansible-role-functional-jobs-centos7
+      - name: ansible-role-functional-jobs-fedora-24
+      - name: ansible-role-functional-jobs-trusty
+      - name: ansible-role-functional-jobs-xenial
+      - name: docs-on-rtfd
+      - name: windmill-jobs-centos7-nv
+      - name: windmill-jobs-trusty
+      - name: windmill-jobs-xenial
+
   - name: openstack/ansible-role-virtualenv
     template:
       - name: merge-check