diff --git a/gerrit/acls/openstack/ceilometermiddleware.config b/gerrit/acls/openstack/ceilometermiddleware.config
deleted file mode 100644
index 2f3f251941..0000000000
--- a/gerrit/acls/openstack/ceilometermiddleware.config
+++ /dev/null
@@ -1,26 +0,0 @@
-[access "refs/heads/*"]
-abandon = group ceilometer-core
-label-Code-Review = -2..+2 group ceilometer-core
-label-Workflow = -1..+1 group ceilometer-core
-
-[access "refs/heads/stable/*"]
-abandon = group Change Owner
-abandon = group Project Bootstrappers
-abandon = group ceilometer-stable-maint
-abandon = group stable-maint-core
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group Project Bootstrappers
-label-Code-Review = -2..+2 group ceilometer-stable-maint
-label-Code-Review = -2..+2 group stable-maint-core
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+0 group Change Owner
-label-Workflow = -1..+1 group Project Bootstrappers
-label-Workflow = -1..+1 group ceilometer-stable-maint
-label-Workflow = -1..+1 group stable-maint-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/heat-cfnclient.config b/gerrit/acls/openstack/heat-cfnclient.config
deleted file mode 100644
index c8dd0d82f7..0000000000
--- a/gerrit/acls/openstack/heat-cfnclient.config
+++ /dev/null
@@ -1,11 +0,0 @@
-[access "refs/heads/*"]
-abandon = group heat-core
-label-Code-Review = -2..+2 group heat-core
-label-Workflow = -1..+1 group heat-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/heat-specs.config b/gerrit/acls/openstack/heat-specs.config
deleted file mode 100644
index c8dd0d82f7..0000000000
--- a/gerrit/acls/openstack/heat-specs.config
+++ /dev/null
@@ -1,11 +0,0 @@
-[access "refs/heads/*"]
-abandon = group heat-core
-label-Code-Review = -2..+2 group heat-core
-label-Workflow = -1..+1 group heat-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/heat-templates.config b/gerrit/acls/openstack/heat-templates.config
deleted file mode 100644
index c8dd0d82f7..0000000000
--- a/gerrit/acls/openstack/heat-templates.config
+++ /dev/null
@@ -1,11 +0,0 @@
-[access "refs/heads/*"]
-abandon = group heat-core
-label-Code-Review = -2..+2 group heat-core
-label-Workflow = -1..+1 group heat-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/ironic-lib.config b/gerrit/acls/openstack/ironic-lib.config
deleted file mode 100644
index 3a7fb3c96c..0000000000
--- a/gerrit/acls/openstack/ironic-lib.config
+++ /dev/null
@@ -1,26 +0,0 @@
-[access "refs/heads/*"]
-abandon = group ironic-core
-label-Code-Review = -2..+2 group ironic-core
-label-Workflow = -1..+1 group ironic-core
-
-[access "refs/heads/stable/*"]
-abandon = group Change Owner
-abandon = group Project Bootstrappers
-abandon = group ironic-stable-maint
-abandon = group stable-maint-core
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group Project Bootstrappers
-label-Code-Review = -2..+2 group ironic-stable-maint
-label-Code-Review = -2..+2 group stable-maint-core
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+0 group Change Owner
-label-Workflow = -1..+1 group Project Bootstrappers
-label-Workflow = -1..+1 group ironic-stable-maint
-label-Workflow = -1..+1 group stable-maint-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/keystonemiddleware.config b/gerrit/acls/openstack/keystonemiddleware.config
deleted file mode 100644
index dcc83d6c9e..0000000000
--- a/gerrit/acls/openstack/keystonemiddleware.config
+++ /dev/null
@@ -1,26 +0,0 @@
-[access "refs/heads/*"]
-abandon = group keystoneauth-core
-label-Code-Review = -2..+2 group keystoneauth-core
-label-Workflow = -1..+1 group keystoneauth-core
-
-[access "refs/heads/stable/*"]
-abandon = group Change Owner
-abandon = group Project Bootstrappers
-abandon = group keystone-stable-maint
-abandon = group stable-maint-core
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group Project Bootstrappers
-label-Code-Review = -2..+2 group keystone-stable-maint
-label-Code-Review = -2..+2 group stable-maint-core
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+0 group Change Owner
-label-Workflow = -1..+1 group Project Bootstrappers
-label-Workflow = -1..+1 group keystone-stable-maint
-label-Workflow = -1..+1 group stable-maint-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/manila-image-elements.config b/gerrit/acls/openstack/manila-image-elements.config
deleted file mode 100644
index 5b5b58060f..0000000000
--- a/gerrit/acls/openstack/manila-image-elements.config
+++ /dev/null
@@ -1,11 +0,0 @@
-[access "refs/heads/*"]
-abandon = group manila-core
-label-Code-Review = -2..+2 group manila-core
-label-Workflow = -1..+1 group manila-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/manila-specs.config b/gerrit/acls/openstack/manila-specs.config
deleted file mode 100644
index 5b5b58060f..0000000000
--- a/gerrit/acls/openstack/manila-specs.config
+++ /dev/null
@@ -1,11 +0,0 @@
-[access "refs/heads/*"]
-abandon = group manila-core
-label-Code-Review = -2..+2 group manila-core
-label-Workflow = -1..+1 group manila-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/mistral-specs.config b/gerrit/acls/openstack/mistral-specs.config
deleted file mode 100644
index 6deffbbf21..0000000000
--- a/gerrit/acls/openstack/mistral-specs.config
+++ /dev/null
@@ -1,11 +0,0 @@
-[access "refs/heads/*"]
-abandon = group mistral-core
-label-Code-Review = -2..+2 group mistral-core
-label-Workflow = -1..+1 group mistral-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/puppet-tripleo.config b/gerrit/acls/openstack/puppet-tripleo.config
deleted file mode 100644
index ecd639a8ba..0000000000
--- a/gerrit/acls/openstack/puppet-tripleo.config
+++ /dev/null
@@ -1,12 +0,0 @@
-[access "refs/heads/*"]
-abandon = group tripleo-core
-label-Code-Review = -2..+2 group tripleo-core
-label-Verified = -1..+1 group tripleo-ci
-label-Workflow = -1..+1 group tripleo-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/python-aodhclient.config b/gerrit/acls/openstack/python-aodhclient.config
deleted file mode 100644
index 513b5dced0..0000000000
--- a/gerrit/acls/openstack/python-aodhclient.config
+++ /dev/null
@@ -1,26 +0,0 @@
-[access "refs/heads/*"]
-abandon = group aodh-core
-label-Code-Review = -2..+2 group aodh-core
-label-Workflow = -1..+1 group aodh-core
-
-[access "refs/heads/stable/*"]
-abandon = group Change Owner
-abandon = group Project Bootstrappers
-abandon = group aodh-stable-maint
-abandon = group stable-maint-core
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group Project Bootstrappers
-label-Code-Review = -2..+2 group aodh-stable-maint
-label-Code-Review = -2..+2 group stable-maint-core
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+0 group Change Owner
-label-Workflow = -1..+1 group Project Bootstrappers
-label-Workflow = -1..+1 group aodh-stable-maint
-label-Workflow = -1..+1 group stable-maint-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/python-glanceclient.config b/gerrit/acls/openstack/python-glanceclient.config
deleted file mode 100644
index b4cdfa6833..0000000000
--- a/gerrit/acls/openstack/python-glanceclient.config
+++ /dev/null
@@ -1,41 +0,0 @@
-[access "refs/heads/*"]
-abandon = group glance-core
-abandon = group glance-reviewbot
-label-Code-Review = -2..+2 group glance-core
-label-Review-Priority = -1..+2 group glance-core
-label-Workflow = -1..0 group glance-reviewbot
-label-Workflow = -1..+1 group glance-core
-
-[access "refs/heads/stable/*"]
-abandon = group Change Owner
-abandon = group Project Bootstrappers
-abandon = group glance-stable-maint
-abandon = group stable-maint-core
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group Project Bootstrappers
-label-Code-Review = -2..+2 group glance-stable-maint
-label-Code-Review = -2..+2 group stable-maint-core
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+0 group Change Owner
-label-Workflow = -1..+1 group Project Bootstrappers
-label-Workflow = -1..+1 group glance-stable-maint
-label-Workflow = -1..+1 group stable-maint-core
-
-[label "Review-Priority"]
-copyAllScoresIfNoCodeChange = true
-copyAllScoresOnTrivialRebase = true
-copyMaxScore = true
-copyMinScore = true
-defaultValue = 0
-function = AnyWithBlock
-value = -1 Branch Freeze
-value = 0 No Priority
-value = +1 Important Change
-value = +2 Top Priority / Holds Gate
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/python-heatclient.config b/gerrit/acls/openstack/python-heatclient.config
deleted file mode 100644
index e48108efdd..0000000000
--- a/gerrit/acls/openstack/python-heatclient.config
+++ /dev/null
@@ -1,26 +0,0 @@
-[access "refs/heads/*"]
-abandon = group heat-core
-label-Code-Review = -2..+2 group heat-core
-label-Workflow = -1..+1 group heat-core
-
-[access "refs/heads/stable/*"]
-abandon = group Change Owner
-abandon = group Project Bootstrappers
-abandon = group heat-stable-maint
-abandon = group stable-maint-core
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group Project Bootstrappers
-label-Code-Review = -2..+2 group heat-stable-maint
-label-Code-Review = -2..+2 group stable-maint-core
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+0 group Change Owner
-label-Workflow = -1..+1 group Project Bootstrappers
-label-Workflow = -1..+1 group heat-stable-maint
-label-Workflow = -1..+1 group stable-maint-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/python-ironicclient.config b/gerrit/acls/openstack/python-ironicclient.config
deleted file mode 100644
index 3a7fb3c96c..0000000000
--- a/gerrit/acls/openstack/python-ironicclient.config
+++ /dev/null
@@ -1,26 +0,0 @@
-[access "refs/heads/*"]
-abandon = group ironic-core
-label-Code-Review = -2..+2 group ironic-core
-label-Workflow = -1..+1 group ironic-core
-
-[access "refs/heads/stable/*"]
-abandon = group Change Owner
-abandon = group Project Bootstrappers
-abandon = group ironic-stable-maint
-abandon = group stable-maint-core
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group Project Bootstrappers
-label-Code-Review = -2..+2 group ironic-stable-maint
-label-Code-Review = -2..+2 group stable-maint-core
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+0 group Change Owner
-label-Workflow = -1..+1 group Project Bootstrappers
-label-Workflow = -1..+1 group ironic-stable-maint
-label-Workflow = -1..+1 group stable-maint-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/python-saharaclient.config b/gerrit/acls/openstack/python-saharaclient.config
deleted file mode 100644
index 07722ca0d5..0000000000
--- a/gerrit/acls/openstack/python-saharaclient.config
+++ /dev/null
@@ -1,27 +0,0 @@
-[access "refs/heads/*"]
-abandon = group sahara-core
-label-Code-Review = -2..+2 group sahara-core
-label-Verified = -1..+1 group sahara-ci
-label-Workflow = -1..+1 group sahara-core
-
-[access "refs/heads/stable/*"]
-abandon = group Change Owner
-abandon = group Project Bootstrappers
-abandon = group sahara-stable-maint
-abandon = group stable-maint-core
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group Project Bootstrappers
-label-Code-Review = -2..+2 group sahara-stable-maint
-label-Code-Review = -2..+2 group stable-maint-core
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+0 group Change Owner
-label-Workflow = -1..+1 group Project Bootstrappers
-label-Workflow = -1..+1 group sahara-stable-maint
-label-Workflow = -1..+1 group stable-maint-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/python-troveclient.config b/gerrit/acls/openstack/python-troveclient.config
deleted file mode 100644
index a494d929d0..0000000000
--- a/gerrit/acls/openstack/python-troveclient.config
+++ /dev/null
@@ -1,27 +0,0 @@
-[access "refs/heads/*"]
-abandon = group trove-core
-label-Code-Review = -2..+2 group trove-core
-label-Verified = -1..+1 group trove-ci
-label-Workflow = -1..+1 group trove-core
-
-[access "refs/heads/stable/*"]
-abandon = group Change Owner
-abandon = group Project Bootstrappers
-abandon = group stable-maint-core
-abandon = group trove-stable-maint
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group Project Bootstrappers
-label-Code-Review = -2..+2 group stable-maint-core
-label-Code-Review = -2..+2 group trove-stable-maint
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+0 group Change Owner
-label-Workflow = -1..+1 group Project Bootstrappers
-label-Workflow = -1..+1 group stable-maint-core
-label-Workflow = -1..+1 group trove-stable-maint
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/sahara-etc.config b/gerrit/acls/openstack/sahara-etc.config
deleted file mode 100644
index 07722ca0d5..0000000000
--- a/gerrit/acls/openstack/sahara-etc.config
+++ /dev/null
@@ -1,27 +0,0 @@
-[access "refs/heads/*"]
-abandon = group sahara-core
-label-Code-Review = -2..+2 group sahara-core
-label-Verified = -1..+1 group sahara-ci
-label-Workflow = -1..+1 group sahara-core
-
-[access "refs/heads/stable/*"]
-abandon = group Change Owner
-abandon = group Project Bootstrappers
-abandon = group sahara-stable-maint
-abandon = group stable-maint-core
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group Project Bootstrappers
-label-Code-Review = -2..+2 group sahara-stable-maint
-label-Code-Review = -2..+2 group stable-maint-core
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+0 group Change Owner
-label-Workflow = -1..+1 group Project Bootstrappers
-label-Workflow = -1..+1 group sahara-stable-maint
-label-Workflow = -1..+1 group stable-maint-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/security-analysis.config b/gerrit/acls/openstack/security-analysis.config
deleted file mode 100644
index cc1b7563b3..0000000000
--- a/gerrit/acls/openstack/security-analysis.config
+++ /dev/null
@@ -1,11 +0,0 @@
-[access "refs/heads/*"]
-abandon = group security-doc-core
-label-Code-Review = -2..+2 group security-doc-core
-label-Workflow = -1..+1 group security-doc-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/specs-cookiecutter.config b/gerrit/acls/openstack/specs-cookiecutter.config
deleted file mode 100644
index d5587dea3a..0000000000
--- a/gerrit/acls/openstack/specs-cookiecutter.config
+++ /dev/null
@@ -1,10 +0,0 @@
-[access "refs/heads/*"]
-abandon = group cookiecutter-core
-label-Code-Review = -2..+2 group cookiecutter-core
-label-Workflow = -1..+1 group cookiecutter-core
-
-[receive]
-requireChangeId = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/sushy-tools.config b/gerrit/acls/openstack/sushy-tools.config
deleted file mode 100644
index a9840e81f8..0000000000
--- a/gerrit/acls/openstack/sushy-tools.config
+++ /dev/null
@@ -1,11 +0,0 @@
-[access "refs/heads/*"]
-abandon = group sushy-core
-label-Code-Review = -2..+2 group sushy-core
-label-Workflow = -1..+1 group sushy-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/vitrage-specs.config b/gerrit/acls/openstack/vitrage-specs.config
deleted file mode 100644
index 6a1c2d30a9..0000000000
--- a/gerrit/acls/openstack/vitrage-specs.config
+++ /dev/null
@@ -1,11 +0,0 @@
-[access "refs/heads/*"]
-abandon = group vitrage-core
-label-Code-Review = -2..+2 group vitrage-core
-label-Workflow = -1..+1 group vitrage-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/x/cloudroast.config b/gerrit/acls/x/cloudroast.config
deleted file mode 100644
index 172287a2d9..0000000000
--- a/gerrit/acls/x/cloudroast.config
+++ /dev/null
@@ -1,14 +0,0 @@
-[access "refs/heads/*"]
-abandon = group cloud-cafe-core
-label-Code-Review = -2..+2 group cloud-cafe-core
-label-Workflow = -1..+1 group cloud-cafe-core
-
-[access "refs/tags/*"]
-pushSignedTag = group cloud-cafe-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/x/networking-zvm.config b/gerrit/acls/x/networking-zvm.config
deleted file mode 100644
index 6728cdb04e..0000000000
--- a/gerrit/acls/x/networking-zvm.config
+++ /dev/null
@@ -1,16 +0,0 @@
-[access "refs/heads/*"]
-abandon = group zvm-driver-core
-create = group zvm-driver-release
-label-Code-Review = -2..+2 group zvm-driver-core
-label-Verified = -1..+1 group zvm-ci
-label-Workflow = -1..+1 group zvm-driver-core
-
-[access "refs/tags/*"]
-pushSignedTag = group zvm-driver-release
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/x/opencafe.config b/gerrit/acls/x/opencafe.config
deleted file mode 100644
index 172287a2d9..0000000000
--- a/gerrit/acls/x/opencafe.config
+++ /dev/null
@@ -1,14 +0,0 @@
-[access "refs/heads/*"]
-abandon = group cloud-cafe-core
-label-Code-Review = -2..+2 group cloud-cafe-core
-label-Workflow = -1..+1 group cloud-cafe-core
-
-[access "refs/tags/*"]
-pushSignedTag = group cloud-cafe-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/zuul/zuul-sphinx.config b/gerrit/acls/zuul/zuul-sphinx.config
deleted file mode 100644
index 14f5456101..0000000000
--- a/gerrit/acls/zuul/zuul-sphinx.config
+++ /dev/null
@@ -1,16 +0,0 @@
-[access "refs/for/refs/*"]
-pushMerge = group zuul-release
-
-[access "refs/heads/*"]
-abandon = group zuul-core
-label-Code-Review = -2..+2 group zuul-core
-label-Workflow = -1..+1 group zuul-core
-
-[access "refs/tags/*"]
-pushSignedTag = group zuul-release
-
-[receive]
-requireChangeId = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index bbf9ec7f67..dcc93e4483 100644
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -1163,6 +1163,7 @@
   use-storyboard: true
   groups:
     - ceilometer
+  acl-config: /home/gerrit2/acls/openstack/ceilometer.config
 - project: openstack/charm-aodh
   description: Juju Charm - Aodh
   acl-config: /home/gerrit2/acls/openstack/charm.config
@@ -3078,6 +3079,7 @@
   description: CloudFormation compatibile Heat client
   groups:
     - heat
+  acl-config: /home/gerrit2/acls/openstack/heat-cfntools.config
 - project: openstack/heat-cfntools
   use-storyboard: true
   description: OpenStack Orchestration (Heat) CFN Tools
@@ -3095,6 +3097,7 @@
   groups:
     - heat
   description: OpenStack Orchestration (Heat) Specifications
+  acl-config: /home/gerrit2/acls/openstack/heat-cfntools.config
 - project: openstack/heat-tempest-plugin
   use-storyboard: true
   description: OpenStack Orchestration (Heat) Tempest Plugin
@@ -3106,6 +3109,7 @@
   description: OpenStack Orchestration (Heat) Templates
   groups:
     - heat
+  acl-config: /home/gerrit2/acls/openstack/heat-cfntools.config
 - project: openstack/heat-translator
   use-storyboard: true
   description: Translate non-heat templates to Heat Orchestration Template.
@@ -3177,6 +3181,7 @@
   use-storyboard: true
   groups:
     - ironic
+  acl-config: /home/gerrit2/acls/openstack/ironic.config
 - project: openstack/ironic-prometheus-exporter
   description: Application capable to export hardware sensor data from Ironic nodes
     to a Prometheus Server.
@@ -3279,6 +3284,7 @@
   description: OpenStack Identity (Keystone) Middleware
   options:
     - translate
+  acl-config: /home/gerrit2/acls/openstack/keystoneauth.config
 - project: openstack/kolla
   description: Kolla provides production-ready containers and deployment tools for
     operating OpenStack clouds
@@ -3354,10 +3360,12 @@
 - project: openstack/manila-image-elements
   description: Automated way to build a bootable linux image for use by the Manila
     generic driver.
+  acl-config: /home/gerrit2/acls/openstack/python-manilaclient.config
 - project: openstack/manila-specs
   groups:
     - manila
   description: Specs repo for Manila (OpenStack Shared File Systems) project.
+  acl-config: /home/gerrit2/acls/openstack/python-manilaclient.config
 - project: openstack/manila-tempest-plugin
   groups:
     - manila
@@ -3410,6 +3418,7 @@
   description: OpenStack Workflow (Mistral) Specifications
   groups:
     - mistral
+  acl-config: /home/gerrit2/acls/openstack/mistral-lib.config
 - project: openstack/mistral-tempest-plugin
   description: Tempest Plugin for Mistral project
   groups:
@@ -4528,6 +4537,7 @@
   description: Lightweight composition layer for Puppet TripleO
   groups:
     - tripleo
+  acl-config: /home/gerrit2/acls/openstack/tripleo.config
 - project: openstack/puppet-trove
   description: OpenStack Trove Puppet Module
   acl-config: /home/gerrit2/acls/openstack/puppet-modules.config
@@ -4567,6 +4577,7 @@
   use-storyboard: true
   groups:
     - ceilometer
+  acl-config: /home/gerrit2/acls/openstack/aodh.config
 - project: openstack/python-appcatalogclient
   description: RETIRED, Client library for App Catalog API
   acl-config: /home/gerrit2/acls/openstack/retired.config
@@ -4620,6 +4631,7 @@
   acl-config: /home/gerrit2/acls/openstack/retired.config
 - project: openstack/python-glanceclient
   description: OpenStack Image Management (Glance) Client
+  acl-config: /home/gerrit2/acls/openstack/glance.config
 - project: openstack/python-gnocchiclient
   description: RETIRED, Gnocchi Client
   acl-config: /home/gerrit2/acls/openstack/retired.config
@@ -4630,6 +4642,7 @@
     - translate
   groups:
     - heat
+  acl-config: /home/gerrit2/acls/openstack/heat.config
 - project: openstack/python-ironic-inspector-client
   description: A python client and OpenStackClient plugin for Ironic Inspector
   use-storyboard: true
@@ -4641,6 +4654,7 @@
   use-storyboard: true
   groups:
     - ironic
+  acl-config: /home/gerrit2/acls/openstack/ironic.config
 - project: openstack/python-karborclient
   description: Python client library for karbor API
   use-storyboard: true
@@ -4729,6 +4743,7 @@
   groups:
     - sahara
   description: Python bindings and CLI for Sahara.
+  acl-config: /home/gerrit2/acls/openstack/sahara.config
 - project: openstack/python-searchlightclient
   description: OpenStack Search (Searchlight) Client
   use-storyboard: true
@@ -4765,6 +4780,7 @@
 - project: openstack/python-troveclient
   use-storyboard: true
   description: OpenStack Database as a Service (Trove) Client
+  acl-config: /home/gerrit2/acls/openstack/trove.config
   groups:
     - trove
 - project: openstack/python-vitrageclient
@@ -4898,13 +4914,13 @@
   groups:
     - sahara
   description: Repo for sahara-related utils.
-  acl-config: /home/gerrit2/acls/openstack/sahara-etc.config
+  acl-config: /home/gerrit2/acls/openstack/sahara.config
 - project: openstack/sahara-image-elements
   use-storyboard: true
   groups:
     - sahara
   description: Disk image elements for Sahara
-  acl-config: /home/gerrit2/acls/openstack/sahara-etc.config
+  acl-config: /home/gerrit2/acls/openstack/sahara.config
 - project: openstack/sahara-plugin-ambari
   description: Ambari provisioning plugin for Sahara
   use-storyboard: true
@@ -5024,6 +5040,7 @@
     - translate
 - project: openstack/security-analysis
   description: Security Analysis of OpenStack Big Tent Projects
+  acl-config: /home/gerrit2/acls/openstack/security-doc.config
 - project: openstack/security-doc
   description: Documentation work from the OpenStack Security Group (OSSG)
   groups:
@@ -5081,6 +5098,7 @@
   use-storyboard: true
   groups:
     - release
+  acl-config: /home/gerrit2/acls/openstack/cookiecutter.config
 - project: openstack/sphinx-feature-classification
   use-storyboard: true
   description: Common feature classification documentation frameworks
@@ -5102,6 +5120,7 @@
 - project: openstack/sushy-tools
   description: A set of tools to support the development and test of the Sushy library
   use-storyboard: true
+  acl-config: /home/gerrit2/acls/openstack/sushy.config
   groups:
     - ironic
 - project: openstack/swift
@@ -5350,6 +5369,7 @@
   use-storyboard: true
   groups:
     - vitrage
+  acl-config: /home/gerrit2/acls/openstack/vitrage.config
 - project: openstack/vitrage-tempest-plugin
   description: Tempest Plugin for Vitrage project
   use-storyboard: true
@@ -6241,6 +6261,7 @@
   description: A Health-Checking service for OpenStack deployments.
 - project: x/cloudroast
   description: Automated Test Case Repository for OpenStack. Based on CloudCAFE.
+  acl-config: /home/gerrit2/acls/x/cloudcafe.config
 - project: x/cloudv-ostf-adapter
   description: RETIRED, Fuel-independent OSTF adapter for Cloud Validation
   acl-config: /home/gerrit2/acls/openstack/retired.config
@@ -7540,6 +7561,7 @@
 - project: x/networking-zvm
   description: Implements zVM ML2 mechanism driver and zVM neutron agent for OpenStack
     Neutron.
+  acl-config: /home/gerrit2/acls/x/nova-zvm-virt-driver.config
 - project: x/neutron-classifier
   description: Common library for services that classify packets
 - project: x/neutron-interconnection
@@ -7582,6 +7604,7 @@
     for OpenStack.
 - project: x/opencafe
   description: Common Automation Framework Engine. Core driver for CloudCAFE
+  acl-config: /home/gerrit2/acls/x/cloudcafe.config
 - project: x/openstack-ansible-os_swift_sync
   description: RETIRED, Role os_swift_sync for OpenStack-Ansible
   acl-config: /home/gerrit2/acls/openstack/retired.config
@@ -8196,6 +8219,7 @@
   groups:
     - zuul
   description: Sphinx extension for Zuul jobs
+  acl-config: /home/gerrit2/acls/zuul/zuul.config
 - project: zuul/zuul-website
   use-storyboard: true
   groups: