diff --git a/gerrit/acls/openstack/deb-openstack-pkg-tools.config b/gerrit/acls/openstack/deb-openstack-pkg-tools.config
index f22b89f305..1043f5e973 100644
--- a/gerrit/acls/openstack/deb-openstack-pkg-tools.config
+++ b/gerrit/acls/openstack/deb-openstack-pkg-tools.config
@@ -4,6 +4,9 @@ create = group deb-packaging-release
 label-Code-Review = -2..+2 group deb-packaging-core
 label-Workflow = -1..+1 group deb-packaging-core
 
+[access "refs/tags/*"]
+pushSignedTag = group deb-packaging-release
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true