diff --git a/securitygroup.ports.tf b/securitygroup.ports.tf
index 0535c58..a366d18 100644
--- a/securitygroup.ports.tf
+++ b/securitygroup.ports.tf
@@ -70,6 +70,12 @@ locals {
       from_port   = 9443
       to_port     = 9443
     },
+    {
+      component   = "metrics-server"
+      description = "metrics-server endpoint"
+      from_port   = 10251
+      to_port     = 10251
+    },
     {
       component   = "cert-manager"
       description = "cert-manager-webhook"