diff --git a/apis/fluentd/v1alpha1/tests/expected/fluentd-cluster-cfg-output-loki.cfg b/apis/fluentd/v1alpha1/tests/expected/fluentd-cluster-cfg-output-loki.cfg
index d0e4fd1bb..25abd0811 100644
--- a/apis/fluentd/v1alpha1/tests/expected/fluentd-cluster-cfg-output-loki.cfg
+++ b/apis/fluentd/v1alpha1/tests/expected/fluentd-cluster-cfg-output-loki.cfg
@@ -25,11 +25,14 @@
   <match **>
     @id  ClusterFluentdConfig-cluster-fluentd-config::cluster::clusteroutput::fluentd-output-loki-0
     @type  loki
+    ca_cert  /path/to/ca.pem
+    cert  /path/to/certificate.pem
     drop_single_key  true
     extra_labels  {"key11":"value11","key12":"value12"}
     extract_kubernetes_labels  true
     include_thread_label  true
     insecure_tls  true
+    key  /path/to/key.key
     password  s3cr3tP@ssword
     remove_keys  key31,key32
     tenant  0c3ba7a4-3148-4605-b62a-afc92dd1c4d7
diff --git a/apis/fluentd/v1alpha1/tests/expected/fluentd-mixed-cfgs-output-copy-1.cfg b/apis/fluentd/v1alpha1/tests/expected/fluentd-mixed-cfgs-output-copy-1.cfg
index 40bc95728..9f176e28f 100644
--- a/apis/fluentd/v1alpha1/tests/expected/fluentd-mixed-cfgs-output-copy-1.cfg
+++ b/apis/fluentd/v1alpha1/tests/expected/fluentd-mixed-cfgs-output-copy-1.cfg
@@ -21,11 +21,14 @@
     <store>
       @id  FluentdConfig-fluent-fluentd-config::cluster::clusteroutput::fluentd-output-loki-0
       @type  loki
+      ca_cert  /path/to/ca.pem
+      cert  /path/to/certificate.pem
       drop_single_key  true
       extra_labels  {"key11":"value11","key12":"value12"}
       extract_kubernetes_labels  true
       include_thread_label  true
       insecure_tls  true
+      key  /path/to/key.key
       password  s3cr3tP@ssword
       remove_keys  key31,key32
       tenant  0c3ba7a4-3148-4605-b62a-afc92dd1c4d7
diff --git a/apis/fluentd/v1alpha1/tests/tools.go b/apis/fluentd/v1alpha1/tests/tools.go
index 0520c440b..dcad8f515 100644
--- a/apis/fluentd/v1alpha1/tests/tools.go
+++ b/apis/fluentd/v1alpha1/tests/tools.go
@@ -549,9 +549,9 @@ spec:
         - key32
       dropSingleKey: true
       includeThreadLabel: true
-#      tlsCaCertFile: /path/to/ca.pem
-#      tlsClientCertFile: /path/to/certificate.pem
-#      tlsPrivateKeyFile: /path/to/key.key
+      tlsCaCertFile: /path/to/ca.pem
+      tlsClientCertFile: /path/to/certificate.pem
+      tlsPrivateKeyFile: /path/to/key.key
       insecure: true
 `