diff --git a/inventory/host_vars/openqa-aarch64-01.qa.fedoraproject.org b/inventory/host_vars/openqa-aarch64-01.qa.fedoraproject.org
index c71effe299..7d9ba64fdc 100644
--- a/inventory/host_vars/openqa-aarch64-01.qa.fedoraproject.org
+++ b/inventory/host_vars/openqa-aarch64-01.qa.fedoraproject.org
@@ -12,13 +12,6 @@ nrpe_procs_crit: 300
 
 sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 
-# openQA tap worker hosts (like this one) do stuff with ifcfg that base
-# doesn't understand. terrible, terrible stuff. seriously - it doesn't
-# handle the openvswitch config well. so let's tell it to just configure
-# the actual connected interface (which on this system is eth0) for us
-# and leave everything else alone.
-ansible_ifcfg_whitelist: ['eth0']
-
 openqa_workers: 3
 
 # has an HW RNG, so let's have rngd
diff --git a/inventory/host_vars/openqa-aarch64-02.qa.fedoraproject.org b/inventory/host_vars/openqa-aarch64-02.qa.fedoraproject.org
index 0c9670403c..37db504733 100644
--- a/inventory/host_vars/openqa-aarch64-02.qa.fedoraproject.org
+++ b/inventory/host_vars/openqa-aarch64-02.qa.fedoraproject.org
@@ -12,6 +12,13 @@ nrpe_procs_crit: 300
 
 sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 
+# openQA tap worker hosts (like this one) do stuff with ifcfg that base
+# doesn't understand. terrible, terrible stuff. seriously - it doesn't
+# handle the openvswitch config well. so let's tell it to just configure
+# the actual connected interface (which on this system is eth0) for us
+# and leave everything else alone.
+ansible_ifcfg_whitelist: ['eth0']
+
 openqa_workers: 3
 
 # has an HW RNG, so let's have rngd