diff --git a/terraform/firewall.tf b/terraform/firewall.tf
index c1663a25ef11c19994edbf0f1a1a7400d455a9ad..fffcb3ccea89746e33182c29ba06288b5cf72def 100644
--- a/terraform/firewall.tf
+++ b/terraform/firewall.tf
@@ -2,7 +2,7 @@
 resource "hcloud_firewall" "k8s-node" {
   name = "k8s-node"
   apply_to {
-    label_selector = "k8s.io/node=true"
+    label_selector = "k8s.io/node"
   }
 
   # ICMP is always a good idea
@@ -78,7 +78,7 @@ resource "hcloud_firewall" "k8s-node" {
 resource "hcloud_firewall" "k8s-master" {
   name = "k8s-master"
   apply_to {
-    label_selector = "k8s.io/master=true"
+    label_selector = "k8s.io/master"
   }
 
   # ICMP is always a good idea
@@ -125,7 +125,7 @@ resource "hcloud_firewall" "k8s-master" {
 resource "hcloud_firewall" "k8s-ingress" {
   name = "k8s-ingress"
   apply_to {
-    label_selector = "k8s.io/ingress=true"
+    label_selector = "k8s.io/ingress"
   }
 
   # ICMP is always a good idea