diff --git a/test/kubemark/start-kubemark.sh b/test/kubemark/start-kubemark.sh
index 59b8d9b61aa..6bfa7fbde2d 100755
--- a/test/kubemark/start-kubemark.sh
+++ b/test/kubemark/start-kubemark.sh
@@ -51,7 +51,7 @@ gcloud compute disks create "${MASTER_NAME}-pd" \
     --type "${MASTER_DISK_TYPE}" \
     --size "${MASTER_DISK_SIZE}"
 
-gcloud compute instances create ${MASTER_NAME} \
+gcloud compute instances create "${MASTER_NAME}" \
     --project "${PROJECT}" \
     --zone "${ZONE}" \
     --machine-type "${MASTER_SIZE}" \
@@ -62,6 +62,13 @@ gcloud compute instances create ${MASTER_NAME} \
     --scopes "storage-ro,compute-rw,logging-write" \
     --disk "name=${MASTER_NAME}-pd,device-name=master-pd,mode=rw,boot=no,auto-delete=no"
 
+gcloud compute firewall-rules create "kubemark-master-https" \
+    --project "${PROJECT}" \
+    --network "${NETWORK}" \
+    --source-ranges "0.0.0.0/0" \
+    --target-tags "${MASTER_NAME}" \
+    --allow "tcp:443" || true
+
 MASTER_IP=$(gcloud compute instances describe hollow-cluster-master \
   --zone="${ZONE}" --project="${PROJECT}" | grep natIP: | cut -f2 -d":" | sed "s/ //g")