diff --git a/gerrit/acls/openstack/windmill-config.config b/gerrit/acls/openstack/windmill-config.config
new file mode 100644
index 0000000000..bed177124f
--- /dev/null
+++ b/gerrit/acls/openstack/windmill-config.config
@@ -0,0 +1,14 @@
+[access "refs/heads/*"]
+abandon = group windmill-config-core
+label-Code-Review = -2..+2 group windmill-config-core
+label-Workflow = -1..+1 group windmill-config-core
+
+[access "refs/tags/*"]
+pushSignedTag = group windmill-config-release
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = false
+
+[submit]
+mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 1b2101a946..d7efdfec69 100755
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -7765,6 +7765,8 @@
   description: An Ansible deployment to validate ansible roles for Continuous Integration.
 - project: openstack/windmill-backup
   description: An Ansible deployment to manage backups for Windmill.
+- project: openstack/windmill-config
+  description: Ansible inventory and configuration content for Windmill.
 - project: openstack/windmill-ops
   description: Operations-related content for Windmill.
 - project: openstack/workload-ref-archs
diff --git a/gerritbot/channels.yaml b/gerritbot/channels.yaml
index aefe43cc9b..485345a7ad 100755
--- a/gerritbot/channels.yaml
+++ b/gerritbot/channels.yaml
@@ -2138,6 +2138,7 @@ openstack-windmill:
     - openstack/ansible-role-zuul
     - openstack/windmill
     - openstack/windmill-backup
+    - openstack/windmill-config
     - openstack/windmill-ops
   branches:
     - master
diff --git a/zuul/main.yaml b/zuul/main.yaml
index e8890bfdde..6403b97717 100644
--- a/zuul/main.yaml
+++ b/zuul/main.yaml
@@ -1501,6 +1501,7 @@
           - openstack/whereto
           - openstack/windmill
           - openstack/windmill-backup
+          - openstack/windmill-config
           - openstack/windmill-ops
           - openstack/workload-ref-archs
           - openstack/wsme