diff --git a/templates/etc/firewalld/services/kubernetes.xml.j2 b/templates/etc/firewalld/services/kubernetes.xml.j2
index cf477eb..cc3c44b 100644
--- a/templates/etc/firewalld/services/kubernetes.xml.j2
+++ b/templates/etc/firewalld/services/kubernetes.xml.j2
@@ -10,10 +10,12 @@
   <port protocol="tcp" port="10251"/>
   <port protocol="tcp" port="10252"/>
   <port protocol="tcp" port="10255"/>
-{% else %}
-{% if kubernetes_master == true %}
-  <port protocol="tcp" port="10250"/>
+{% if kubernetes_master_taint == true %}
+  <port protocol="tcp" port="80"/>
+  <port protocol="tcp" port="443"/>
 {% endif %}
+{% else %}
+  <port protocol="tcp" port="10250"/>
   <port protocol="tcp" port="80"/>
   <port protocol="tcp" port="443"/>
 {% endif %}