diff --git a/terraform/the-ring.tf b/terraform/the-ring.tf
index e3e4015..f35475d 100644
--- a/terraform/the-ring.tf
+++ b/terraform/the-ring.tf
@@ -25,4 +25,13 @@ resource "linode_firewall" "the-ring" {
     ipv4     = ["0.0.0.0/0"]
     ipv6     = ["::/0"]
   }
+
+  inbound {
+    label    = "allow-k8s-unprivileged"
+    action   = "ACCEPT"
+    protocol = "TCP"
+    ports    = "30000-32767"
+    ipv4     = ["0.0.0.0/0"]
+    ipv6     = ["::/0"]
+  }
 }