diff --git a/groups/groups.yaml b/groups/groups.yaml
index b548fd913fc..0f5220eebcb 100644
--- a/groups/groups.yaml
+++ b/groups/groups.yaml
@@ -305,6 +305,7 @@ groups:
       - davanum@gmail.com
       - spiffxp@google.com
       - thockin@google.com
+
   #
   # Push groups: k8s-infra-push-*
   #
@@ -350,6 +351,22 @@ groups:
       - thockin@google.com
       - tpepper@gmail.com
 
+  - email-id: k8s-infra-push-cri-tools@kubernetes.io
+    name: k8s-infra-push-cri-tools
+    description: |-
+      ACL for pushing CRI tools artifacts
+    settings:
+      ReconcileMembers: "true"
+    members:
+      - k8s-infra-release-admins@kubernetes.io
+      - k8s-infra-release-editors@kubernetes.io
+      - dawnchen@google.com
+      - decarr@redhat.com
+      - feiskyer@gmail.com
+      - saschagrunert@gmail.com
+      - tallclair@google.com
+      - thockin@google.com
+
   - email-id: k8s-infra-push-kind@kubernetes.io
     name: k8s-infra-push-kind
     description: |-
diff --git a/infra/gcp/ensure-prod-storage.sh b/infra/gcp/ensure-prod-storage.sh
index a7d6ff8f4ab..da479cd9320 100755
--- a/infra/gcp/ensure-prod-storage.sh
+++ b/infra/gcp/ensure-prod-storage.sh
@@ -78,6 +78,7 @@ ALL_PROD_PROJECTS=(
 ALL_PROD_BUCKETS=(
     "csi"
     "cni"
+    "cri-tools"
     "kind"
 )