diff --git a/gerrit/acls/openstack/ansible-role-redhat-subscription.config b/gerrit/acls/openstack/ansible-role-redhat-subscription.config
new file mode 100644
index 0000000000..3142dfc686
--- /dev/null
+++ b/gerrit/acls/openstack/ansible-role-redhat-subscription.config
@@ -0,0 +1,15 @@
+[access "refs/heads/*"]
+abandon = group ansible-role-redhat-subscription-core
+create = group ansible-role-redhat-subscription-release
+label-Code-Review = -2..+2 group ansible-role-redhat-subscription-core
+label-Workflow = -1..+1 group ansible-role-redhat-subscription-core
+
+[access "refs/tags/*"]
+pushSignedTag = group ansible-role-redhat-subscription-release
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = false
+
+[submit]
+mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index b6750323c8..786057b1c7 100755
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -923,6 +923,9 @@
   description: Ansible role to manage Nginx
 - project: openstack/ansible-role-nodepool
   description: Ansible role to manage Nodepool
+- project: openstack/ansible-role-redhat-subscription
+  description: Ansible role to configure Red Hat Subscription Management
+  upstream: https://github.com/samdoran/ansible-role-redhat-subscription.git
 - project: openstack/ansible-role-shade
   description: Ansible role to manage Shade
 - project: openstack/ansible-role-ssh
diff --git a/zuul/main.yaml b/zuul/main.yaml
index 6c5b63318c..176fcba2a3 100644
--- a/zuul/main.yaml
+++ b/zuul/main.yaml
@@ -221,6 +221,7 @@
           - openstack/ansible-role-logrotate
           - openstack/ansible-role-nginx
           - openstack/ansible-role-nodepool
+          - openstack/ansible-role-redhat-subscription
           - openstack/ansible-role-shade
           - openstack/ansible-role-ssh
           - openstack/ansible-role-sudoers