diff --git a/roles/kubernetes/node/templates/haproxy.cfg.j2 b/roles/kubernetes/node/templates/haproxy.cfg.j2
index 76466b00810db7e1ee6ca6d10b31461c8a62c305..6c467bda28daf45f8e66e36e2c34f3c81521d383 100644
--- a/roles/kubernetes/node/templates/haproxy.cfg.j2
+++ b/roles/kubernetes/node/templates/haproxy.cfg.j2
@@ -27,7 +27,7 @@ frontend healthz
 {% endif %}
 
 frontend kube_api_frontend
-  bind *:{{ loadbalancer_apiserver_port|default(kube_apiserver_port) }}
+  bind 127.0.0.1:{{ loadbalancer_apiserver_port|default(kube_apiserver_port) }}
   mode tcp
   option tcplog
   default_backend kube_api_backend
diff --git a/roles/kubernetes/node/templates/nginx.conf.j2 b/roles/kubernetes/node/templates/nginx.conf.j2
index 0c869d94ae85e4efc6e39974a715401e87d0f4c8..bdd830d7dc2e307b989169125888fb1f68fa68b7 100644
--- a/roles/kubernetes/node/templates/nginx.conf.j2
+++ b/roles/kubernetes/node/templates/nginx.conf.j2
@@ -19,7 +19,7 @@ stream {
   }
 
   server {
-    listen        {{ loadbalancer_apiserver_port|default(kube_apiserver_port) }};
+    listen        127.0.0.1:{{ loadbalancer_apiserver_port|default(kube_apiserver_port) }};
     proxy_pass    kube_apiserver;
     proxy_timeout 10m;
     proxy_connect_timeout 1s;