diff --git a/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh b/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
index 4b1c525..c01fcc6 100644
--- a/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
+++ b/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
@@ -9,6 +9,8 @@ ufw allow 80 comment HTTP
 ufw allow 443 comment HTTPS
 ufw allow to ${node_ip} port 4244 comment "Hubble peer endpoint"
 ufw allow to ${node_ip} port 9100 comment "Metrics endpoint"
+ufw allow to ${node_ip} port 9962 comment "Cilium agent metrics"
+ufw allow to ${node_ip} port 9963 comment "Cilium operator metrics"
 ufw allow to ${node_ip} port 9964 comment "Cilium agent endpoint"
 ufw allow to ${node_ip} port 9965 comment "Hubble metrics endpoint"
 ufw allow to ${node_ip} port 10249 comment "kube-proxy metrics port"