diff --git a/infra/config/config.star b/infra/config/config.star
index ad626d61a1..4f47256b06 100755
--- a/infra/config/config.star
+++ b/infra/config/config.star
@@ -291,6 +291,10 @@ luci.bucket(
             "project-webrtc-ci-schedulers",
         ]),
     ],
+    constraints = luci.bucket_constraints(
+        pools = ["luci.webrtc.ci"],
+        service_accounts = ["webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com"],
+    ),
 )
 
 luci.bucket(
@@ -304,6 +308,10 @@ luci.bucket(
             "service-account-chromeperf",
         ]),
     ],
+    constraints = luci.bucket_constraints(
+        pools = ["luci.webrtc.perf"],
+        service_accounts = ["webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com"],
+    ),
 )
 
 luci.bucket(
diff --git a/infra/config/cr-buildbucket.cfg b/infra/config/cr-buildbucket.cfg
index 5264a78cbb..6e20161eb1 100644
--- a/infra/config/cr-buildbucket.cfg
+++ b/infra/config/cr-buildbucket.cfg
@@ -1774,6 +1774,10 @@ buckets {
       }
     }
   }
+  constraints {
+    pools: "luci.webrtc.ci"
+    service_accounts: "webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
 }
 buckets {
   name: "cron"
@@ -2639,6 +2643,10 @@ buckets {
       }
     }
   }
+  constraints {
+    pools: "luci.webrtc.perf"
+    service_accounts: "webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
 }
 buckets {
   name: "try"