diff --git a/deployment/check/common/targetNode.nix b/deployment/check/common/targetNode.nix
index e88be811..b40578d6 100644
--- a/deployment/check/common/targetNode.nix
+++ b/deployment/check/common/targetNode.nix
@@ -44,6 +44,18 @@ in
 
       ## Test VMs don't have a bootloader by default.
       boot.loader.grub.enable = false;
+
+      users.users.root.openssh.authorizedKeys.keys =
+        let
+          keys = import ../../../keys;
+        in
+        lib.attrValues keys.contributors
+        ++ [
+          # allow our panel vm access to the test machines
+          keys.panel
+          # allow continuous deployment access
+          keys.cd
+        ];
     }
 
     (mkIf config.enableAcme {