diff --git a/roles/etcd/templates/etcd.env.j2 b/roles/etcd/templates/etcd.env.j2
index a46a739484699270192433e506872b5efbe2e7d9..6cd760405ce0b1af23cc30376a4562c02ec6fc1a 100644
--- a/roles/etcd/templates/etcd.env.j2
+++ b/roles/etcd/templates/etcd.env.j2
@@ -42,3 +42,9 @@ ETCD_PEER_CLIENT_CERT_AUTH={{ etcd_peer_client_auth }}
 {% if host_architecture != "amd64" -%}
 ETCD_UNSUPPORTED_ARCH={{host_architecture}}
 {%- endif %}
+
+# CLI settings
+ETCDCTL_ENDPOINTS=https://127.0.0.1:2379
+ETCDCTL_CA_FILE={{ etcd_cert_dir }}/ca.pem
+ETCDCTL_KEY_FILE={{ etcd_cert_dir }}/admin-{{ inventory_hostname }}-key.pem
+ETCDCTL_CERT_FILE={{ etcd_cert_dir }}/admin-{{ inventory_hostname }}.pem