diff --git a/etcd.conf.yml.sample b/etcd.conf.yml.sample
index 9d1648e22d3..a080c5f3d75 100644
--- a/etcd.conf.yml.sample
+++ b/etcd.conf.yml.sample
@@ -145,3 +145,7 @@ cipher-suites: [
   TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
 ]
+
+# Limit etcd to specific TLS protocol versions 
+tls-min-version: 'TLS1.2'
+tls-max-version: 'TLS1.3'