FIREWALL-CMD

adding specific port

sudo firewall-cmd --permanent --add-port=10250/tcp

adding range

sudo firewall-cmd --permanent --add-port=30000-32767/tcp

reload config

sudo firewall-cmd --reload