Try granting gerrit-ci View Private Changes on refs/heads/* in addition
diff --git a/project.config b/project.config
index ad63d8f..6b8ccef 100644
--- a/project.config
+++ b/project.config
@@ -24,6 +24,7 @@
 	submit = group Project Owners
 	editTopicName = +force group Project Owners
 	editTopicName = group gerrit-verifiers
+	viewPrivateChanges = group gerrit-ci
 [access "refs/meta/config"]
 	push = group Project Owners
 	push = group google/gerritcodereview-maintainers@googlegroups.com