diff --git a/config/v1/types_tlssecurityprofile.go b/config/v1/types_tlssecurityprofile.go
index b18ef647c2f..beb63c8d766 100644
--- a/config/v1/types_tlssecurityprofile.go
+++ b/config/v1/types_tlssecurityprofile.go
@@ -220,7 +220,8 @@ type TLSProfileSpec struct {
 	//   minTLSVersion: VersionTLS11
 	//
 	// NOTE: currently the highest minTLSVersion allowed is VersionTLS12
-	//
+	// +kubebuilder:validation:Required
+	// +kubebuilder:validation:Enum=VersionTLS10;VersionTLS11;VersionTLS12;VersionTLS13
 	MinTLSVersion TLSProtocolVersion `json:"minTLSVersion"`
 }