diff --git a/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh b/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
index 69eb237..204d910 100644
--- a/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
+++ b/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
@@ -8,6 +8,7 @@ ufw allow 16443 comment "Kubernetes API endpoint"
 ufw allow 80 comment HTTP
 ufw allow 443 comment HTTPS
 ufw allow to ${node_ip} port 9100 comment "Metrics endpoint"
+ufw allow to ${node_ip} port 10249 comment "kube-proxy metrics port"
 ufw allow to ${node_ip} port 10250 comment "cadvisor port"
 ufw allow to ${node_ip} port 10259 comment "kube-scheduler port"
 ufw allow to ${node_ip} port 10257 comment "kube-controller-manager port"
diff --git a/terraform/modules/k8s-cluster/templates/snap/microk8s-config-manager.tftpl b/terraform/modules/k8s-cluster/templates/snap/microk8s-config-manager.tftpl
index df5c1e3..bab68bf 100644
--- a/terraform/modules/k8s-cluster/templates/snap/microk8s-config-manager.tftpl
+++ b/terraform/modules/k8s-cluster/templates/snap/microk8s-config-manager.tftpl
@@ -14,6 +14,8 @@ extraKubeletArgs:
   --node-ip: ${node_ip}
   --cluster-dns: 10.152.183.10
   --cluster-domain: cluster.local
+extraKubeProxyArgs:
+  --metrics-bind-address: 0.0.0.0:10249
 extraSANs:
   - ${api_server_domain}
 addons: