labs/provisioning: fix etcd tunnel ports