diff --git a/terraform/firewall.tf b/terraform/firewall.tf
index 4bc524580b4ee156bd9890cb12f16156051ba355..8e1e8a138301222a6b3950a709fd3d9abc500f76 100644
--- a/terraform/firewall.tf
+++ b/terraform/firewall.tf
@@ -9,12 +9,13 @@ resource "hcloud_firewall" "k8s-node" {
   #
   # Network reachability tests
   rule {
-   direction = "in"
-   protocol  = "icmp"
-   source_ips = [
-      "0.0.0.0/0",
-      "::/0"
-   ]
+      description     = "ICMP"
+      direction       = "in"
+      protocol        = "icmp"
+      source_ips      = [
+        "0.0.0.0/0",
+        "::/0"
+      ]
   }
   rule {
       description     = "Kublet"
@@ -66,12 +67,13 @@ resource "hcloud_firewall" "k8s-master" {
   #
   # Network reachability tests
   rule {
-   direction = "in"
-   protocol  = "icmp"
-   source_ips = [
-      "0.0.0.0/0",
-      "::/0"
-   ]
+      description     = "ICMP"
+      direction       = "in"
+      protocol        = "icmp"
+      source_ips      = [
+        "0.0.0.0/0",
+        "::/0"
+      ]
   }
   # Kubernetes API
   rule {
@@ -113,12 +115,13 @@ resource "hcloud_firewall" "k8s-ingress" {
   #
   # Network reachability tests
   rule {
-   direction = "in"
-   protocol  = "icmp"
-   source_ips = [
-      "0.0.0.0/0",
-      "::/0"
-   ]
+      description     = "ICMP"
+      direction       = "in"
+      protocol        = "icmp"
+      source_ips      = [
+        "0.0.0.0/0",
+        "::/0"
+      ]
   }
   rule {
       direction       = "in"