diff --git a/main.tf b/main.tf
index d0eb508..7437d2f 100644
--- a/main.tf
+++ b/main.tf
@@ -156,5 +156,40 @@ resource "hcloud_placement_group" "k3s" {
 data "hcloud_load_balancer" "traefik" {
   name = "traefik"
 
-  depends_on = [module.first_control_plane]
+  depends_on = [null_resource.cluster_provisioning]
+}
+
+
+resource "null_resource" "cluster_provisioning" {
+
+  triggers = {
+    agent_ids         = "${join(",", module.agents.*.id)}"
+    control_plane_ids = "${join(",", concat([module.first_control_plane.id], module.control_planes.*.id))}"
+  }
+
+  depends_on = [ null_resource.first_control_plane, null_resource.control_planes, null_resource.agents ]
+
+  provisioner "remote-exec" {
+    connection {
+      user           = "root"
+      private_key    = local.ssh_private_key
+      agent_identity = local.ssh_identity
+      host           = module.first_control_plane.ipv4_address
+    }
+
+    inline = [
+      <<-EOT
+      timeout 120 bash <<EOF
+      until [ -n "\$(kubectl get -n kube-system service/traefik --output=jsonpath='{.status.loadBalancer.ingress[0].ip}')" ]; do
+          echo "Waiting for load-balancer to get an IP..."
+      done
+      EOF
+      EOT
+    ]
+  }
+
+  provisioner "local-exec" {
+    when = destroy
+    command = "hcloud load-balancer delete traefik"
+  }
 }
diff --git a/master.tf b/master.tf
index 9dc91c1..dd51aeb 100644
--- a/master.tf
+++ b/master.tf
@@ -157,14 +157,7 @@ resource "null_resource" "first_control_plane" {
       "kubectl apply -k /tmp/post_install",
       "echo 'Waiting for the system-upgrade-controller deployment to become available...'",
       "kubectl -n system-upgrade wait --for=condition=available --timeout=120s deployment/system-upgrade-controller",
-      "kubectl -n system-upgrade apply -f /tmp/post_install/plans.yaml",
-      <<-EOT
-      timeout 120 bash <<EOF
-      until [ -n "\$(kubectl get -n kube-system service/traefik --output=jsonpath='{.status.loadBalancer.ingress[0].ip}')" ]; do
-          echo "Waiting for load-balancer to get an IP..."
-      done
-      EOF
-      EOT
+      "kubectl -n system-upgrade apply -f /tmp/post_install/plans.yaml"
     ]
   }