diff --git a/gerrit/acls/openstack/openstacksdk.config b/gerrit/acls/openstack/openstacksdk.config
index e5d8c8115d..cf424433fc 100644
--- a/gerrit/acls/openstack/openstacksdk.config
+++ b/gerrit/acls/openstack/openstacksdk.config
@@ -6,6 +6,7 @@ pushMerge = group openstacksdk-core
 
 [access "refs/heads/*"]
 abandon = group openstacksdk-core
+label-Allow-Post-Review = +0..+1 group openstacksdk-core
 label-Code-Review = -2..+2 group openstacksdk-core
 label-Workflow = -1..+1 group openstacksdk-core
 
@@ -24,6 +25,12 @@ label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group openstacksdk-stable-maint
 label-Workflow = -1..+1 group stable-maint-core
 
+[label "Allow-Post-Review"]
+defaultValue = 0
+function = NoOp
+value = 0 Abstain
+value = +1 Approved for Zuul Post Review Pipeline
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/tools/normalize_acl.py b/tools/normalize_acl.py
index 3915bc6bf1..0ad661e44e 100755
--- a/tools/normalize_acl.py
+++ b/tools/normalize_acl.py
@@ -73,6 +73,7 @@ valid_keys = {'abandon',
               'forgeCommitter',
               'function',
               'inheritFrom',
+              'label-Allow-Post-Review',
               'label-Backport-Candidate',
               'label-Code-Review',
               'label-PTL-Approved',