diff --git a/third_party/go/patches/k8s-reserve-metropolis-ports.patch b/third_party/go/patches/k8s-reserve-metropolis-ports.patch
index 1756d7b..89cff48 100644
--- a/third_party/go/patches/k8s-reserve-metropolis-ports.patch
+++ b/third_party/go/patches/k8s-reserve-metropolis-ports.patch
@@ -1,8 +1,18 @@
+From b10b2922f0b4fb114b6b535df1ba9fca583c6cf2 Mon Sep 17 00:00:00 2001
+From: Tim Windelschmidt <tim@monogon.tech>
+Date: Sat, 9 Sep 2023 14:22:59 +0200
+Subject: [PATCH 6/6] reserve metropolis system ports
+
+---
+ .../service/portallocator/controller/repair.go    | 15 +++++++++++++++
+ 1 file changed, 15 insertions(+)
+
 diff --git a/pkg/registry/core/service/portallocator/controller/repair.go b/pkg/registry/core/service/portallocator/controller/repair.go
---- a/pkg/registry/core/service/portallocator/controller/repair.go	(revision f66044f4361b9f1f96f0053dd46cb7dce5e990a8)
-+++ b/pkg/registry/core/service/portallocator/controller/repair.go	(revision bdd789d982712179c6a849ceed7f12e063b3fce3)
-@@ -21,6 +21,8 @@
- 	"fmt"
+index fa870760490..0f67fe7eb9b 100644
+--- a/pkg/registry/core/service/portallocator/controller/repair.go
++++ b/pkg/registry/core/service/portallocator/controller/repair.go
+@@ -22,6 +22,8 @@ import (
+ 	"sync"
  	"time"
 
 +	"source.monogon.dev/metropolis/node"
@@ -10,7 +20,7 @@
  	corev1 "k8s.io/api/core/v1"
  	"k8s.io/apimachinery/pkg/api/errors"
  	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-@@ -123,6 +126,18 @@
+@@ -133,6 +136,18 @@ func (c *Repair) doRunOnce() error {
  		return fmt.Errorf("unable to refresh the port block: %v", err)
  	}
 
@@ -28,4 +38,7 @@
 +
  	rebuilt, err := portallocator.NewInMemory(c.portRange)
  	if err != nil {
- 		return fmt.Errorf("unable to create port allocator: %v", err)
\ No newline at end of file
+ 		return fmt.Errorf("unable to create port allocator: %v", err)
+-- 
+2.41.0
+