diff --git a/vcluster-0.21.1/values.yaml b/vcluster-0.21.1/values.yaml
index 5f773a3..f83abd1 100644
--- a/vcluster-0.21.1/values.yaml
+++ b/vcluster-0.21.1/values.yaml
@@ -505,10 +505,8 @@ controlPlane:
     pathType: ImplementationSpecific
     labels: {}
     annotations:
-      # nginx.ingress.kubernetes.io/backend-protocol: HTTPS
-      # nginx.ingress.kubernetes.io/ssl-passthrough: "true"
-      # nginx.ingress.kubernetes.io/ssl-redirect: "true"
-      nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+      nginx.ingress.kubernetes.io/backend-protocol: HTTPS
+      nginx.ingress.kubernetes.io/ssl-passthrough: "true"
       nginx.ingress.kubernetes.io/ssl-redirect: "true"
     # Spec allows you to configure extra ingress options.
     spec:
@@ -884,12 +882,12 @@ exportKubeConfig:
   server: ""
   
   # If tls should get skipped for the server
-  insecure: true
+  insecure: false
   
   # ServiceAccount can be used to generate a service account token instead of the default certificates.
   serviceAccount:
     # Name of the service account to be used to generate a service account token instead of the default certificates.
-    name: "token-sa"
+    name: ""
     # Namespace of the service account to be used to generate a service account token instead of the default certificates.
     # If omitted, will use the kube-system namespace.
     namespace: ""
@@ -963,3 +961,4 @@ experimental:
 telemetry:
   # Enabled specifies that the telemetry for the vCluster control plane should be enabled.
   enabled: true
+