diff --git a/templates/sshd_config.erb b/templates/sshd_config.erb
index 7c72024..b55fd2f 100644
--- a/templates/sshd_config.erb
+++ b/templates/sshd_config.erb
@@ -86,8 +86,5 @@ Subsystem sftp <%= scope.lookupvar('::ssh::params::sftp_path') %>
 UsePAM yes
 
 # allow ansible connections from puppetmaster host
-Match host ci-puppetmaster.openstack.org
-    PermitRootLogin without-password
-
 Match host puppetmaster.openstack.org
     PermitRootLogin without-password