diff --git a/gerrit/acls/openstack/puppet-tripleo.config b/gerrit/acls/openstack/puppet-tripleo.config
new file mode 100644
index 0000000000..d9a6cc5679
--- /dev/null
+++ b/gerrit/acls/openstack/puppet-tripleo.config
@@ -0,0 +1,15 @@
+[access "refs/heads/*"]
+abandon = group puppet-tripleo-core
+abandon = group tripleo-core
+label-Code-Review = -2..+2 group puppet-tripleo-core
+label-Code-Review = -2..+2 group tripleo-core
+label-Verified = -1..+1 group tripleo-ci
+label-Workflow = -1..+1 group puppet-tripleo-core
+label-Workflow = -1..+1 group tripleo-core
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 8e73902a84..3c3d4532e9 100644
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -4586,7 +4586,6 @@
   description: Lightweight composition layer for Puppet TripleO
   groups:
     - tripleo
-  acl-config: /home/gerrit2/acls/openstack/tripleo.config
 - project: openstack/puppet-trove
   description: OpenStack Trove Puppet Module
   acl-config: /home/gerrit2/acls/openstack/puppet-modules.config