diff --git a/projects/control-service/projects/helm_charts/pipelines-control-service/templates/deployment.yaml b/projects/control-service/projects/helm_charts/pipelines-control-service/templates/deployment.yaml
index e83abc378a..4b7068e482 100644
--- a/projects/control-service/projects/helm_charts/pipelines-control-service/templates/deployment.yaml
+++ b/projects/control-service/projects/helm_charts/pipelines-control-service/templates/deployment.yaml
@@ -182,6 +182,8 @@ spec:
               value: "{{ .Values.monitoringSync.delayMillis }}"
             - name: DEFAULT_MONITORING_INITIAL_DELAY_SYNC_INTERVAL
               value: "{{ .Values.monitoringSync.initialDelayMillis }}"
+            - name: UPLOAD_VALIDATION_FILETYPES_ALLOWLIST
+              value: "{{ .Values.uploadValidationFileTypesAllowList }}"
             {{- if .Values.datajobTemplate.enabled }}
             - name: K8S_DATA_JOB_TEMPLATE_FILE
               value: "/etc/datajobs/k8s_data_job_template.yaml"
@@ -232,6 +234,7 @@ spec:
             - name: DATAJOBS_DEPLOYMENT_BUILDER_SERVICE_ACCOUNT_NAME
               value: "{{ .Values.deploymentBuilder.serviceAccountName }}"
             {{- end }}
+
 {{- if .Values.extraVars }}
 {{ toYaml .Values.extraVars | indent 12 }}
 {{- end }}
diff --git a/projects/control-service/projects/helm_charts/pipelines-control-service/values.yaml b/projects/control-service/projects/helm_charts/pipelines-control-service/values.yaml
index b77873430c..680ec7eb48 100644
--- a/projects/control-service/projects/helm_charts/pipelines-control-service/values.yaml
+++ b/projects/control-service/projects/helm_charts/pipelines-control-service/values.yaml
@@ -152,6 +152,14 @@ deploymentGitPassword: ""
 uploadGitReadWriteUsername: ""
 uploadGitReadWritePassword: ""
 
+# List of file types that are allowed to be uploaded.
+# It is comma separated list with file types. For example "image/png,text/plain"
+# Only base type can be specified as well, then all files with that base type are allowed.
+# For example to allow all text files say "text" only, then any file with type "text/xxx" will be allowed.
+# Instead to allow only sql and ini text files specify "text/x-sql,text/x-ini"
+# Full list of file types are documented in https://tika.apache.org
+# If set to empty, then all file types are allowed.
+uploadValidationFileTypesAllowList: ""
 
 ## [Required] The repository where the data job images will be stored (so write permission must be granted)
 ## Automatically a repository will be created for each data job in ${deploymentDockerRepository}/data-job-name