diff --git a/IaC-test/nodes.tf b/IaC-test/nodes.tf
index 86576ff..aeffc57 100644
--- a/IaC-test/nodes.tf
+++ b/IaC-test/nodes.tf
@@ -13,6 +13,7 @@ resource "openstack_networking_port_v2" "kubecport" {
                           data.openstack_networking_secgroup_v2.sshfromjumphosts.id, 
                           data.openstack_networking_secgroup_v2.allegress.id,
                           resource.openstack_networking_secgroup_v2.microk8s.id,
+                          resource.openstack_networking_secgroup_v2.microk8s-dco.id,
                           resource.openstack_networking_secgroup_v2.https.id
                         ]
   admin_state_up      = "true"
@@ -35,7 +36,8 @@ resource "openstack_compute_instance_v2" "controller-nodes" {
   security_groups = [
                        data.openstack_networking_secgroup_v2.sshfromjumphosts.name,
                        data.openstack_networking_secgroup_v2.allegress.name,
-                       resource.openstack_networking_secgroup_v2.microk8s.name,
+                       resource.openstack_networking_secgroup_v2.microk8s.id,
+                       resource.openstack_networking_secgroup_v2.microk8s-dco.id,
                        resource.openstack_networking_secgroup_v2.https.name
                     ]
   block_device {
diff --git a/IaC-test/vars.tf b/IaC-test/vars.tf
index fee64db..257d32c 100644
--- a/IaC-test/vars.tf
+++ b/IaC-test/vars.tf
@@ -42,8 +42,14 @@ variable "workerdcreplicas" {
   default = "2"
 }
 
+# Replicas per datacenter
+variable "controllerdcreplicas" {
+  default = "2"
+}
+
+
 variable "controller_instance_count" {
-  default = "3"
+  default = "2"
 }
 
 variable "controller_instance_type" {
diff --git a/k8s/rook/cluster.yaml b/k8s/rook/cluster.yaml
index f419691..d17e3a3 100644
--- a/k8s/rook/cluster.yaml
+++ b/k8s/rook/cluster.yaml
@@ -239,7 +239,7 @@ spec:
   storage: # cluster level storage configuration and selection
     useAllNodes: false
     nodes:
-      # - name: k8sw1
+      - name: k8sw1
       - name: k8sw2
       - name: k8sw3
       - name: k8sw4