diff --git a/charts/openshift-console-plugin/templates/configmap.yaml b/charts/openshift-console-plugin/templates/configmap.yaml
index 07c2170e..b8d922d1 100644
--- a/charts/openshift-console-plugin/templates/configmap.yaml
+++ b/charts/openshift-console-plugin/templates/configmap.yaml
@@ -19,6 +19,15 @@ data:
         listen              [::]:{{ .Values.plugin.port }} ssl;
         ssl_certificate     /var/cert/tls.crt;
         ssl_certificate_key /var/cert/tls.key;
+        {{- if .Values.tls.protocols }}
+        ssl_protocols       {{ .Values.tls.protocols }};
+        {{- end }}
+        {{- if .Values.tls.ciphers }}
+        ssl_ciphers         {{ .Values.tls.ciphers }};
+        {{- end }}
+        {{- if .Values.tls.preferServerCiphers }}
+        ssl_prefer_server_ciphers {{ .Values.tls.preferServerCiphers }};
+        {{- end }}
         root                /usr/share/nginx/html;
       }
     }
diff --git a/charts/openshift-console-plugin/values.yaml b/charts/openshift-console-plugin/values.yaml
index 6cc865ba..c38ad369 100644
--- a/charts/openshift-console-plugin/values.yaml
+++ b/charts/openshift-console-plugin/values.yaml
@@ -1,11 +1,15 @@
 ---
 plugin:
-  name: ""
-  description: ""
-  image: ""
+  name: ''
+  description: ''
+  image: ''
   imagePullPolicy: IfNotPresent
   replicas: 2
   port: 9443
+  tls:
+    protocols: 'TLSv1.2 TLSv1.3'
+    ciphers: 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305'
+    preferServerCiphers: 'on'
   securityContext:
     enabled: true
   podSecurityContext:
@@ -24,19 +28,19 @@ plugin:
       cpu: 10m
       memory: 50Mi
   basePath: /
-  certificateSecretName: ""
+  certificateSecretName: ''
   serviceAccount:
     create: true
     annotations: {}
-    name: ""
+    name: ''
   patcherServiceAccount:
     create: true
     annotations: {}
-    name: ""
+    name: ''
   jobs:
     patchConsoles:
       enabled: true
-      image: "registry.redhat.io/openshift4/ose-tools-rhel8@sha256:e44074f21e0cca6464e50cb6ff934747e0bd11162ea01d522433a1a1ae116103"
+      image: 'registry.redhat.io/openshift4/ose-tools-rhel8@sha256:e44074f21e0cca6464e50cb6ff934747e0bd11162ea01d522433a1a1ae116103'
       podSecurityContext:
         enabled: true
         runAsNonRoot: true