diff --git a/terraform/templates/cloud-init-k8s.tftpl b/terraform/templates/cloud-init-k8s.tftpl
index 4b385df..2e2a0db 100644
--- a/terraform/templates/cloud-init-k8s.tftpl
+++ b/terraform/templates/cloud-init-k8s.tftpl
@@ -19,6 +19,9 @@ runcmd:
   - ufw allow 80 comment HTTP
   - ufw allow 443 comment HTTPS
   - ufw allow to ${node_ip} port 9100 comment "Metrics endpoint"
+  - ufw allow to ${node_ip} port 10250 comment "cadvisor port"
+  - ufw allow to ${node_ip} port 10259 comment "kube-scheduler port"
+  - ufw allow to ${node_ip} port 10257 comment "kube-controller-manager port"
   - ufw enable
   - sed -i -e '/^\(#\|\)PermitRootLogin/s/^.*$/PermitRootLogin no/' /etc/ssh/sshd_config
   - sed -i -e '/^\(#\|\)PasswordAuthentication/s/^.*$/PasswordAuthentication no/' /etc/ssh/sshd_config