diff --git a/modules/gerritbot/files/gerritbot_channel_config.yaml b/modules/gerritbot/files/gerritbot_channel_config.yaml
index d6281ce8f5..650e137475 100644
--- a/modules/gerritbot/files/gerritbot_channel_config.yaml
+++ b/modules/gerritbot/files/gerritbot_channel_config.yaml
@@ -614,6 +614,7 @@ packstack-dev:
       - master
       - grizzly
       - havana
+      - icehouse
 
 openstack-anvil:
     events:
diff --git a/modules/openstack_project/files/gerrit/acls/stackforge/packstack.config b/modules/openstack_project/files/gerrit/acls/stackforge/packstack.config
index 6cd764cc25..b5d45a2004 100644
--- a/modules/openstack_project/files/gerrit/acls/stackforge/packstack.config
+++ b/modules/openstack_project/files/gerrit/acls/stackforge/packstack.config
@@ -1,11 +1,14 @@
 [access "refs/*"]
-create = group packstack-core
+create = group packstack-release
 
 [access "refs/heads/*"]
 abandon = group packstack-core
 label-Code-Review = -2..+2 group packstack-core
 label-Workflow = -1..+1 group packstack-core
 
+[access "refs/tags/*"]
+pushSignedTag = group packstack-release
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true