diff --git a/infra/config/config.star b/infra/config/config.star
index fd77183c7c..8955686887 100755
--- a/infra/config/config.star
+++ b/infra/config/config.star
@@ -276,6 +276,10 @@ luci.bucket(
             "project-webrtc-tryjob-access",
         ]),
     ],
+    constraints = luci.bucket_constraints(
+        pools = ["luci.webrtc.try"],
+        service_accounts = ["webrtc-try-builder@chops-service-accounts.iam.gserviceaccount.com"],
+    ),
 )
 
 luci.bucket(
diff --git a/infra/config/cr-buildbucket.cfg b/infra/config/cr-buildbucket.cfg
index dadca40ce9..456fe1fac0 100644
--- a/infra/config/cr-buildbucket.cfg
+++ b/infra/config/cr-buildbucket.cfg
@@ -5686,4 +5686,8 @@ buckets {
       }
     }
   }
+  constraints {
+    pools: "luci.webrtc.try"
+    service_accounts: "webrtc-try-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
 }