diff --git a/charts/drupal/Chart.yaml b/charts/drupal/Chart.yaml
index 9a1d198..26a8c45 100644
--- a/charts/drupal/Chart.yaml
+++ b/charts/drupal/Chart.yaml
@@ -1,7 +1,7 @@
 name: drupal
 apiVersion: v2
 type: application
-version: 2.0.0-beta12
+version: 2.0.0-beta13
 appVersion: 6.1.4
 description: Helm Chart for deploying an enterprise-grade Drupal environment.
 keywords:
diff --git a/charts/drupal/templates/route/drupal.yaml b/charts/drupal/templates/route/drupal.yaml
index f234d61..0b16e58 100644
--- a/charts/drupal/templates/route/drupal.yaml
+++ b/charts/drupal/templates/route/drupal.yaml
@@ -38,6 +38,15 @@ spec:
   tls:
     termination: {{ .termination | default "edge" }}
     insecureEdgeTerminationPolicy: {{ .insecureEdgeTerminationPolicy | default "Redirect" }}
+    {{- if .key }}
+    key: {{ .key }}
+    {{- end }}
+    {{- if .certificate }}
+    certificate: {{ .certificate }}
+    {{- end }}
+    {{- if .caCertificate }}
+    caCertificate: {{ .caCertificate }}
+    {{- end }}
   {{- end }}
 {{- end }}
 {{- end }}
diff --git a/charts/drupal/values.yaml b/charts/drupal/values.yaml
index 3466615..4032c84 100644
--- a/charts/drupal/values.yaml
+++ b/charts/drupal/values.yaml
@@ -27,9 +27,22 @@ route:
   hosts:
     - chart-example.local
   tls:
+    # Terminate TLS at the OpenShift router (edge): HTTPS is decrypted here,
+    # then the request is forwarded to the app over plain HTTP internally.
     termination: edge
+
+    # Redirect insecure HTTP requests to HTTPS when they reach the route.
     insecureEdgeTerminationPolicy: Redirect
 
+    # Private key for the route certificate (PEM format)
+    # key:
+
+    # Public certificate for the route (PEM format)
+    # certificate:
+
+    # Optional CA certificate chain used to validate the backend/route cert
+    # caCertificate:
+
 extraEnvVars: []
 
 netpol: