Add firewall rule to allow apiserver to proxy other controller kubelets
Add firewall rule to allow apiserver to proxy other controller kubelets

* Prometheus proxies through the apiserver to scrape kubelets
* In multi-controller setups, an apiserver must be able to scrape
kubelets (10250) on other controllers

poseidon/typhoon