diff --git a/nodepool/nodepool.yaml b/nodepool/nodepool.yaml
index b2f3a6e..2f7dfea 100644
--- a/nodepool/nodepool.yaml
+++ b/nodepool/nodepool.yaml
@@ -18,18 +18,6 @@
       - name: main
         max-servers: 4
         use-internal-ip: True
-        # Host key checking is disabled because:
-        # 1) We're using the internal IP so it's slightly less
-        # valuable (fewer attack vectors).
-        # 2) The images we're using appear to have a key baked into
-        # them which is overwritten at boot.  Because we're using the
-        # internal IP, nodepool can end up connecting to the instance
-        # very quickly and retrieving the original host key rather
-        # than the new one (which is likely to be written a couple of
-        # seconds later).  By disabling this in nodepool, we let Zuul
-        # just use the first key it finds (and it's likely to take
-        # long enough that it will have been updated by then).
-        host-key-checking: False
         labels:
           - name: debian-stretch-8G
             instance-type: n1-standard-2