diff --git a/metadata/service/master/cluster.yml b/metadata/service/master/cluster.yml
index f755401..fb17497 100644
--- a/metadata/service/master/cluster.yml
+++ b/metadata/service/master/cluster.yml
@@ -20,6 +20,7 @@
         allow_privileged: True
       apiserver:
         address: ${_param:cluster_local_address}
+        secure_port: 6443
         internal_address: ${_param:kubernetes_internal_api_address}
         insecure_address: 127.0.0.1
         insecure_port: 8080
diff --git a/metadata/service/master/single.yml b/metadata/service/master/single.yml
index 00dff34..86d5b7e 100644
--- a/metadata/service/master/single.yml
+++ b/metadata/service/master/single.yml
@@ -20,6 +20,7 @@
         allow_privileged: True
       apiserver:
         address: ${_param:single_address}
+        secure_port: 443
         internal_address: ${_param:kubernetes_internal_api_address}
         insecure_address: 127.0.0.1
         insecure_port: 8080
diff --git a/metadata/service/pool/cluster.yml b/metadata/service/pool/cluster.yml
index 41c8ffb..26122f0 100644
--- a/metadata/service/pool/cluster.yml
+++ b/metadata/service/pool/cluster.yml
@@ -13,6 +13,7 @@
         name: ${linux:system:name}
       apiserver:
         host: ${_param:cluster_vip_address}
+        port: 443
         insecure:
           enabled: True
         members:
diff --git a/metadata/service/pool/single.yml b/metadata/service/pool/single.yml
index e5826c3..4e7a736 100644
--- a/metadata/service/pool/single.yml
+++ b/metadata/service/pool/single.yml
@@ -13,6 +13,7 @@
         name: ${linux:system:name}
       apiserver:
         host: ${_param:master_address}
+        port: 443
         insecure:
           enabled: True
         members: