diff --git a/.gitignore b/.gitignore
index b8a95f6..addeb98 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,7 @@
 bin/
 command
 testing
+ca/
+config/
+envoy/
+
diff --git a/pkg/envoy/boilerplate.go b/pkg/envoy/boilerplate.go
index d2579df..d53003d 100644
--- a/pkg/envoy/boilerplate.go
+++ b/pkg/envoy/boilerplate.go
@@ -329,6 +329,9 @@ func (c *KubernetesConfigurator) makeFilterChain(certificate Certificate, virtua
 				},
 			},
 		},
+		TlsParams: &auth.TlsParameters{
+			TlsMinimumProtocolVersion: auth.TlsParameters_TLSv1_2,
+		},
 	}
 
 	anyTls, err := anypb.New(tls)