diff --git a/charts/fleet/templates/deployment.yaml b/charts/fleet/templates/deployment.yaml
index 4ade7c1baa..0706930c89 100644
--- a/charts/fleet/templates/deployment.yaml
+++ b/charts/fleet/templates/deployment.yaml
@@ -262,6 +262,11 @@ spec:
             value: "{{ .Values.osquery.logging.pubsub.resultTopic }}"
           {{- end }}
           ## END OSQUERY SECTION
+          ## APPEND ENVIRONMENT VARIABLES FROM VALUES
+          {{- range $key, $value := .Values.environments }}
+          - name: {{ $key }}
+            value: {{ $value | quote }}
+          {{- end }}
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
index 024a1d1131..bfeffb3cb0 100644
--- a/charts/fleet/values.yaml
+++ b/charts/fleet/values.yaml
@@ -191,3 +191,16 @@ gke:
     useManagedCertificate: false
   # Workload Identity allows the K8s service account to assume the IAM permissions of a GCP service account
   workloadIdentityEmail: ""
+
+## Section: Environment Variables
+# All of the environment variables that can be set for Fleet
+environments:
+  # MDM Settings
+  # The following environment variables are used to configure Fleet to work with
+  # Apple's MDM service. These are optional and only required if you are using
+  # Fleet to manage Apple devices.
+  # To more information: https://fleetdm.com/docs/using-fleet/mdm-setup#step-3-configure-fleet-with-the-required-files
+  FLEET_MDM_APPLE_APNS_CERT_BYTES: ""
+  FLEET_MDM_APPLE_APNS_KEY_BYTES: ""
+  FLEET_MDM_APPLE_SCEP_CERT_BYTES: ""
+  FLEET_MDM_APPLE_SCEP_KEY_BYTES: ""