diff --git a/apis/kafka/v1alpha1/zz_generated.deepcopy.go b/apis/kafka/v1alpha1/zz_generated.deepcopy.go
index b333a0f4b..84e26a739 100644
--- a/apis/kafka/v1alpha1/zz_generated.deepcopy.go
+++ b/apis/kafka/v1alpha1/zz_generated.deepcopy.go
@@ -128,12 +128,12 @@ func (in *ConnectClusterSpec) DeepCopyInto(out *ConnectClusterSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(kubedbv1.SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.KeystoreCredSecret != nil {
 		in, out := &in.KeystoreCredSecret, &out.KeystoreCredSecret
 		*out = new(kubedbv1.SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.TLS != nil {
 		in, out := &in.TLS, &out.TLS
diff --git a/apis/kubedb/v1/openapi_generated.go b/apis/kubedb/v1/openapi_generated.go
index e8be62033..d2c015cf5 100644
--- a/apis/kubedb/v1/openapi_generated.go
+++ b/apis/kubedb/v1/openapi_generated.go
@@ -30976,6 +30976,18 @@ func schema_apimachinery_apis_kubedb_v1_SecretReference(ref common.ReferenceCall
 							Format:      "",
 						},
 					},
+					"rotateAfter": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Recommendation engine will generate RotateAuth opsReq using this field",
+							Ref:         ref("k8s.io/apimachinery/pkg/apis/meta/v1.Duration"),
+						},
+					},
+					"activeFrom": {
+						SchemaProps: spec.SchemaProps{
+							Description: "ActiveFrom holds the RFC3339 time. The referred authSecret is in-use from this timestamp.",
+							Ref:         ref("k8s.io/apimachinery/pkg/apis/meta/v1.Time"),
+						},
+					},
 					"externallyManaged": {
 						SchemaProps: spec.SchemaProps{
 							Type:   []string{"boolean"},
@@ -30985,6 +30997,8 @@ func schema_apimachinery_apis_kubedb_v1_SecretReference(ref common.ReferenceCall
 				},
 			},
 		},
+		Dependencies: []string{
+			"k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "k8s.io/apimachinery/pkg/apis/meta/v1.Time"},
 	}
 }
 
diff --git a/apis/kubedb/v1/types.go b/apis/kubedb/v1/types.go
index 9a9d904ea..7b5ae04cc 100644
--- a/apis/kubedb/v1/types.go
+++ b/apis/kubedb/v1/types.go
@@ -190,7 +190,13 @@ type SystemUserSecretsSpec struct {
 
 type SecretReference struct {
 	core.LocalObjectReference `json:",inline,omitempty"`
-	ExternallyManaged         bool `json:"externallyManaged,omitempty"`
+	// Recommendation engine will generate RotateAuth opsReq using this field
+	// +optional
+	RotateAfter *metav1.Duration `json:"rotateAfter,omitempty"`
+	// ActiveFrom holds the RFC3339 time. The referred authSecret is in-use from this timestamp.
+	// +optional
+	ActiveFrom        *metav1.Time `json:"activeFrom,omitempty"`
+	ExternallyManaged bool         `json:"externallyManaged,omitempty"`
 }
 
 type Age struct {
diff --git a/apis/kubedb/v1/zz_generated.deepcopy.go b/apis/kubedb/v1/zz_generated.deepcopy.go
index e3f357540..b86ca02c7 100644
--- a/apis/kubedb/v1/zz_generated.deepcopy.go
+++ b/apis/kubedb/v1/zz_generated.deepcopy.go
@@ -488,7 +488,7 @@ func (in *ElasticsearchSpec) DeepCopyInto(out *ElasticsearchSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Storage != nil {
 		in, out := &in.Storage, &out.Storage
@@ -811,7 +811,7 @@ func (in *KafkaCruiseControl) DeepCopyInto(out *KafkaCruiseControl) {
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Replicas != nil {
 		in, out := &in.Replicas, &out.Replicas
@@ -919,7 +919,7 @@ func (in *KafkaSpec) DeepCopyInto(out *KafkaSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
@@ -929,7 +929,7 @@ func (in *KafkaSpec) DeepCopyInto(out *KafkaSpec) {
 	if in.KeystoreCredSecret != nil {
 		in, out := &in.KeystoreCredSecret, &out.KeystoreCredSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.TLS != nil {
 		in, out := &in.TLS, &out.TLS
@@ -1090,7 +1090,7 @@ func (in *MariaDBSpec) DeepCopyInto(out *MariaDBSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -1254,7 +1254,7 @@ func (in *MemcachedSpec) DeepCopyInto(out *MemcachedSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.DataVolume != nil {
 		in, out := &in.DataVolume, &out.DataVolume
@@ -1562,7 +1562,7 @@ func (in *MongoDBSpec) DeepCopyInto(out *MongoDBSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -1842,7 +1842,7 @@ func (in *MySQLSpec) DeepCopyInto(out *MySQLSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -2106,7 +2106,7 @@ func (in *PerconaXtraDBSpec) DeepCopyInto(out *PerconaXtraDBSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -2275,7 +2275,7 @@ func (in *PgBouncerSpec) DeepCopyInto(out *PgBouncerSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
@@ -2485,7 +2485,7 @@ func (in *PostgresSpec) DeepCopyInto(out *PostgresSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Storage != nil {
 		in, out := &in.Storage, &out.Storage
@@ -2709,7 +2709,7 @@ func (in *ProxySQLSpec) DeepCopyInto(out *ProxySQLSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Monitor != nil {
 		in, out := &in.Monitor, &out.Monitor
@@ -2991,7 +2991,7 @@ func (in *RedisSentinelSpec) DeepCopyInto(out *RedisSentinelSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Monitor != nil {
 		in, out := &in.Monitor, &out.Monitor
@@ -3067,7 +3067,7 @@ func (in *RedisSpec) DeepCopyInto(out *RedisSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -3187,6 +3187,15 @@ func (in *ScriptSourceSpec) DeepCopy() *ScriptSourceSpec {
 func (in *SecretReference) DeepCopyInto(out *SecretReference) {
 	*out = *in
 	out.LocalObjectReference = in.LocalObjectReference
+	if in.RotateAfter != nil {
+		in, out := &in.RotateAfter, &out.RotateAfter
+		*out = new(metav1.Duration)
+		**out = **in
+	}
+	if in.ActiveFrom != nil {
+		in, out := &in.ActiveFrom, &out.ActiveFrom
+		*out = (*in).DeepCopy()
+	}
 	return
 }
 
@@ -3228,12 +3237,12 @@ func (in *SystemUserSecretsSpec) DeepCopyInto(out *SystemUserSecretsSpec) {
 	if in.ReplicationUserSecret != nil {
 		in, out := &in.ReplicationUserSecret, &out.ReplicationUserSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.MonitorUserSecret != nil {
 		in, out := &in.MonitorUserSecret, &out.MonitorUserSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	return
 }
diff --git a/apis/kubedb/v1alpha2/openapi_generated.go b/apis/kubedb/v1alpha2/openapi_generated.go
index 8c58dc2ee..01ce040ca 100644
--- a/apis/kubedb/v1alpha2/openapi_generated.go
+++ b/apis/kubedb/v1alpha2/openapi_generated.go
@@ -34173,6 +34173,18 @@ func schema_apimachinery_apis_kubedb_v1alpha2_SecretReference(ref common.Referen
 							Format:      "",
 						},
 					},
+					"rotateAfter": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Recommendation engine will generate RotateAuth opsReq using this field",
+							Ref:         ref("k8s.io/apimachinery/pkg/apis/meta/v1.Duration"),
+						},
+					},
+					"activeFrom": {
+						SchemaProps: spec.SchemaProps{
+							Description: "ActiveFrom holds the RFC3339 time. The referred authSecret is in-use from this timestamp.",
+							Ref:         ref("k8s.io/apimachinery/pkg/apis/meta/v1.Time"),
+						},
+					},
 					"externallyManaged": {
 						SchemaProps: spec.SchemaProps{
 							Type:   []string{"boolean"},
@@ -34182,6 +34194,8 @@ func schema_apimachinery_apis_kubedb_v1alpha2_SecretReference(ref common.Referen
 				},
 			},
 		},
+		Dependencies: []string{
+			"k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "k8s.io/apimachinery/pkg/apis/meta/v1.Time"},
 	}
 }
 
diff --git a/apis/kubedb/v1alpha2/types.go b/apis/kubedb/v1alpha2/types.go
index 61cb5e739..771e754ec 100644
--- a/apis/kubedb/v1alpha2/types.go
+++ b/apis/kubedb/v1alpha2/types.go
@@ -207,7 +207,13 @@ type SystemUserSecretsSpec struct {
 
 type SecretReference struct {
 	core.LocalObjectReference `json:",inline,omitempty"`
-	ExternallyManaged         bool `json:"externallyManaged,omitempty"`
+	// Recommendation engine will generate RotateAuth opsReq using this field
+	// +optional
+	RotateAfter *metav1.Duration `json:"rotateAfter,omitempty"`
+	// ActiveFrom holds the RFC3339 time. The referred authSecret is in-use from this timestamp.
+	// +optional
+	ActiveFrom        *metav1.Time `json:"activeFrom,omitempty"`
+	ExternallyManaged bool         `json:"externallyManaged,omitempty"`
 }
 
 type Age struct {
diff --git a/apis/kubedb/v1alpha2/zz_generated.deepcopy.go b/apis/kubedb/v1alpha2/zz_generated.deepcopy.go
index 7e98f2fd0..d50620997 100644
--- a/apis/kubedb/v1alpha2/zz_generated.deepcopy.go
+++ b/apis/kubedb/v1alpha2/zz_generated.deepcopy.go
@@ -274,7 +274,7 @@ func (in *CassandraSpec) DeepCopyInto(out *CassandraSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
@@ -490,7 +490,7 @@ func (in *ClickHouseSpec) DeepCopyInto(out *ClickHouseSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
@@ -1322,7 +1322,7 @@ func (in *ElasticsearchSpec) DeepCopyInto(out *ElasticsearchSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Storage != nil {
 		in, out := &in.Storage, &out.Storage
@@ -1560,7 +1560,7 @@ func (in *EtcdSpec) DeepCopyInto(out *EtcdSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -1745,7 +1745,7 @@ func (in *FerretDBSpec) DeepCopyInto(out *FerretDBSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.PodTemplate != nil {
 		in, out := &in.PodTemplate, &out.PodTemplate
@@ -2020,7 +2020,7 @@ func (in *KafkaCruiseControl) DeepCopyInto(out *KafkaCruiseControl) {
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Replicas != nil {
 		in, out := &in.Replicas, &out.Replicas
@@ -2142,7 +2142,7 @@ func (in *KafkaSpec) DeepCopyInto(out *KafkaSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
@@ -2152,7 +2152,7 @@ func (in *KafkaSpec) DeepCopyInto(out *KafkaSpec) {
 	if in.KeystoreCredSecret != nil {
 		in, out := &in.KeystoreCredSecret, &out.KeystoreCredSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.TLS != nil {
 		in, out := &in.TLS, &out.TLS
@@ -2386,7 +2386,7 @@ func (in *MSSQLServerSpec) DeepCopyInto(out *MSSQLServerSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
@@ -2577,7 +2577,7 @@ func (in *MariaDBSpec) DeepCopyInto(out *MariaDBSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -3084,7 +3084,7 @@ func (in *MongoDBSpec) DeepCopyInto(out *MongoDBSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -3361,7 +3361,7 @@ func (in *MySQLSpec) DeepCopyInto(out *MySQLSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -3626,7 +3626,7 @@ func (in *PerconaXtraDBSpec) DeepCopyInto(out *PerconaXtraDBSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -3796,7 +3796,7 @@ func (in *PgBouncerSpec) DeepCopyInto(out *PgBouncerSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
@@ -3948,7 +3948,7 @@ func (in *PgpoolSpec) DeepCopyInto(out *PgpoolSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
@@ -4196,7 +4196,7 @@ func (in *PostgresSpec) DeepCopyInto(out *PostgresSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Storage != nil {
 		in, out := &in.Storage, &out.Storage
@@ -4421,7 +4421,7 @@ func (in *ProxySQLSpec) DeepCopyInto(out *ProxySQLSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Monitor != nil {
 		in, out := &in.Monitor, &out.Monitor
@@ -4565,7 +4565,7 @@ func (in *RabbitMQSpec) DeepCopyInto(out *RabbitMQSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
@@ -4920,7 +4920,7 @@ func (in *RedisSentinelSpec) DeepCopyInto(out *RedisSentinelSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Monitor != nil {
 		in, out := &in.Monitor, &out.Monitor
@@ -4996,7 +4996,7 @@ func (in *RedisSpec) DeepCopyInto(out *RedisSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.Init != nil {
 		in, out := &in.Init, &out.Init
@@ -5134,6 +5134,15 @@ func (in *ScriptSourceSpec) DeepCopy() *ScriptSourceSpec {
 func (in *SecretReference) DeepCopyInto(out *SecretReference) {
 	*out = *in
 	out.LocalObjectReference = in.LocalObjectReference
+	if in.RotateAfter != nil {
+		in, out := &in.RotateAfter, &out.RotateAfter
+		*out = new(v1.Duration)
+		**out = **in
+	}
+	if in.ActiveFrom != nil {
+		in, out := &in.ActiveFrom, &out.ActiveFrom
+		*out = (*in).DeepCopy()
+	}
 	return
 }
 
@@ -5292,12 +5301,12 @@ func (in *SinglestoreSpec) DeepCopyInto(out *SinglestoreSpec) {
 	if in.LicenseSecret != nil {
 		in, out := &in.LicenseSecret, &out.LicenseSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.PodTemplate != nil {
 		in, out := &in.PodTemplate, &out.PodTemplate
@@ -5648,12 +5657,12 @@ func (in *SystemUserSecretsSpec) DeepCopyInto(out *SystemUserSecretsSpec) {
 	if in.ReplicationUserSecret != nil {
 		in, out := &in.ReplicationUserSecret, &out.ReplicationUserSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.MonitorUserSecret != nil {
 		in, out := &in.MonitorUserSecret, &out.MonitorUserSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	return
 }
@@ -5810,7 +5819,7 @@ func (in *ZooKeeperSpec) DeepCopyInto(out *ZooKeeperSpec) {
 	if in.AuthSecret != nil {
 		in, out := &in.AuthSecret, &out.AuthSecret
 		*out = new(SecretReference)
-		**out = **in
+		(*in).DeepCopyInto(*out)
 	}
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
diff --git a/apis/ops/v1alpha1/clickhouse_ops-types.go b/apis/ops/v1alpha1/clickhouse_ops-types.go
index 53c66cb82..f923be547 100644
--- a/apis/ops/v1alpha1/clickhouse_ops-types.go
+++ b/apis/ops/v1alpha1/clickhouse_ops-types.go
@@ -54,6 +54,8 @@ type ClickHouseOpsRequestSpec struct {
 	DatabaseRef core.LocalObjectReference `json:"databaseRef"`
 	// Specifies the ops request type: UpdateVersion, HorizontalScaling, VerticalScaling etc.
 	Type ClickHouseOpsRequestType `json:"type"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -63,8 +65,8 @@ type ClickHouseOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=Restart
-// ENUM(Restart)
+// +kubebuilder:validation:Enum=Restart;RotateAuth
+// ENUM(Restart, RotateAuth)
 type ClickHouseOpsRequestType string
 
 // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
diff --git a/apis/ops/v1alpha1/clickhouse_ops-types_enum.go b/apis/ops/v1alpha1/clickhouse_ops-types_enum.go
index 48062bbaf..fc27f2a41 100644
--- a/apis/ops/v1alpha1/clickhouse_ops-types_enum.go
+++ b/apis/ops/v1alpha1/clickhouse_ops-types_enum.go
@@ -14,12 +14,15 @@ import (
 const (
 	// ClickHouseOpsRequestTypeRestart is a ClickHouseOpsRequestType of type Restart.
 	ClickHouseOpsRequestTypeRestart ClickHouseOpsRequestType = "Restart"
+	// ClickHouseOpsRequestTypeRotateAuth is a ClickHouseOpsRequestType of type RotateAuth.
+	ClickHouseOpsRequestTypeRotateAuth ClickHouseOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidClickHouseOpsRequestType = fmt.Errorf("not a valid ClickHouseOpsRequestType, try [%s]", strings.Join(_ClickHouseOpsRequestTypeNames, ", "))
 
 var _ClickHouseOpsRequestTypeNames = []string{
 	string(ClickHouseOpsRequestTypeRestart),
+	string(ClickHouseOpsRequestTypeRotateAuth),
 }
 
 // ClickHouseOpsRequestTypeNames returns a list of possible string values of ClickHouseOpsRequestType.
@@ -33,6 +36,7 @@ func ClickHouseOpsRequestTypeNames() []string {
 func ClickHouseOpsRequestTypeValues() []ClickHouseOpsRequestType {
 	return []ClickHouseOpsRequestType{
 		ClickHouseOpsRequestTypeRestart,
+		ClickHouseOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -49,7 +53,8 @@ func (x ClickHouseOpsRequestType) IsValid() bool {
 }
 
 var _ClickHouseOpsRequestTypeValue = map[string]ClickHouseOpsRequestType{
-	"Restart": ClickHouseOpsRequestTypeRestart,
+	"Restart":    ClickHouseOpsRequestTypeRestart,
+	"RotateAuth": ClickHouseOpsRequestTypeRotateAuth,
 }
 
 // ParseClickHouseOpsRequestType attempts to convert a string to a ClickHouseOpsRequestType.
diff --git a/apis/ops/v1alpha1/constant.go b/apis/ops/v1alpha1/constant.go
index da9b164d2..00251e84e 100644
--- a/apis/ops/v1alpha1/constant.go
+++ b/apis/ops/v1alpha1/constant.go
@@ -101,6 +101,12 @@ const (
 	IssueCertificatesFailed    = "IssueCertificatesFailed"
 )
 
+// RotateAuth
+const (
+	RotateAuth       = "RotateAuth"
+	UpdateCredential = "UpdateCredential"
+)
+
 // Restart
 const (
 	Restart              = "Restart"
diff --git a/apis/ops/v1alpha1/druid_ops_types.go b/apis/ops/v1alpha1/druid_ops_types.go
index 0c32106c8..30035feaf 100644
--- a/apis/ops/v1alpha1/druid_ops_types.go
+++ b/apis/ops/v1alpha1/druid_ops_types.go
@@ -59,6 +59,8 @@ type DruidOpsRequestSpec struct {
 	VerticalScaling *DruidVerticalScalingSpec `json:"verticalScaling,omitempty"`
 	// Specifies information necessary for volume expansion
 	VolumeExpansion *DruidVolumeExpansionSpec `json:"volumeExpansion,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -68,8 +70,8 @@ type DruidOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=VerticalScaling;VolumeExpansion;Restart
-// ENUM(VerticalScaling, VolumeExpansion, Restart)
+// +kubebuilder:validation:Enum=VerticalScaling;VolumeExpansion;Restart;RotateAuth
+// ENUM(VerticalScaling, VolumeExpansion, Restart, RotateAuth)
 type DruidOpsRequestType string
 
 // DruidVerticalScalingSpec contains the vertical scaling information of a Druid cluster
diff --git a/apis/ops/v1alpha1/druid_ops_types_enum.go b/apis/ops/v1alpha1/druid_ops_types_enum.go
index 6db24eb7a..4d4bb8aed 100644
--- a/apis/ops/v1alpha1/druid_ops_types_enum.go
+++ b/apis/ops/v1alpha1/druid_ops_types_enum.go
@@ -18,6 +18,8 @@ const (
 	DruidOpsRequestTypeVolumeExpansion DruidOpsRequestType = "VolumeExpansion"
 	// DruidOpsRequestTypeRestart is a DruidOpsRequestType of type Restart.
 	DruidOpsRequestTypeRestart DruidOpsRequestType = "Restart"
+	// DruidOpsRequestTypeRotateAuth is a DruidOpsRequestType of type RotateAuth.
+	DruidOpsRequestTypeRotateAuth DruidOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidDruidOpsRequestType = fmt.Errorf("not a valid DruidOpsRequestType, try [%s]", strings.Join(_DruidOpsRequestTypeNames, ", "))
@@ -26,6 +28,7 @@ var _DruidOpsRequestTypeNames = []string{
 	string(DruidOpsRequestTypeVerticalScaling),
 	string(DruidOpsRequestTypeVolumeExpansion),
 	string(DruidOpsRequestTypeRestart),
+	string(DruidOpsRequestTypeRotateAuth),
 }
 
 // DruidOpsRequestTypeNames returns a list of possible string values of DruidOpsRequestType.
@@ -41,6 +44,7 @@ func DruidOpsRequestTypeValues() []DruidOpsRequestType {
 		DruidOpsRequestTypeVerticalScaling,
 		DruidOpsRequestTypeVolumeExpansion,
 		DruidOpsRequestTypeRestart,
+		DruidOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -60,6 +64,7 @@ var _DruidOpsRequestTypeValue = map[string]DruidOpsRequestType{
 	"VerticalScaling": DruidOpsRequestTypeVerticalScaling,
 	"VolumeExpansion": DruidOpsRequestTypeVolumeExpansion,
 	"Restart":         DruidOpsRequestTypeRestart,
+	"RotateAuth":      DruidOpsRequestTypeRotateAuth,
 }
 
 // ParseDruidOpsRequestType attempts to convert a string to a DruidOpsRequestType.
diff --git a/apis/ops/v1alpha1/elasticsearch_ops_types.go b/apis/ops/v1alpha1/elasticsearch_ops_types.go
index ed716d2fd..607d9988a 100644
--- a/apis/ops/v1alpha1/elasticsearch_ops_types.go
+++ b/apis/ops/v1alpha1/elasticsearch_ops_types.go
@@ -67,6 +67,8 @@ type ElasticsearchOpsRequestSpec struct {
 	Configuration *ElasticsearchCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -76,8 +78,8 @@ type ElasticsearchOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type ElasticsearchOpsRequestType string
 
 // ElasticsearchReplicaReadinessCriteria is the criteria for checking readiness of an Elasticsearch database
diff --git a/apis/ops/v1alpha1/elasticsearch_ops_types_enum.go b/apis/ops/v1alpha1/elasticsearch_ops_types_enum.go
index d007f1cb1..26d79bc40 100644
--- a/apis/ops/v1alpha1/elasticsearch_ops_types_enum.go
+++ b/apis/ops/v1alpha1/elasticsearch_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	ElasticsearchOpsRequestTypeReconfigure ElasticsearchOpsRequestType = "Reconfigure"
 	// ElasticsearchOpsRequestTypeReconfigureTLS is a ElasticsearchOpsRequestType of type ReconfigureTLS.
 	ElasticsearchOpsRequestTypeReconfigureTLS ElasticsearchOpsRequestType = "ReconfigureTLS"
+	// ElasticsearchOpsRequestTypeRotateAuth is a ElasticsearchOpsRequestType of type RotateAuth.
+	ElasticsearchOpsRequestTypeRotateAuth ElasticsearchOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidElasticsearchOpsRequestType = fmt.Errorf("not a valid ElasticsearchOpsRequestType, try [%s]", strings.Join(_ElasticsearchOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _ElasticsearchOpsRequestTypeNames = []string{
 	string(ElasticsearchOpsRequestTypeRestart),
 	string(ElasticsearchOpsRequestTypeReconfigure),
 	string(ElasticsearchOpsRequestTypeReconfigureTLS),
+	string(ElasticsearchOpsRequestTypeRotateAuth),
 }
 
 // ElasticsearchOpsRequestTypeNames returns a list of possible string values of ElasticsearchOpsRequestType.
@@ -57,6 +60,7 @@ func ElasticsearchOpsRequestTypeValues() []ElasticsearchOpsRequestType {
 		ElasticsearchOpsRequestTypeRestart,
 		ElasticsearchOpsRequestTypeReconfigure,
 		ElasticsearchOpsRequestTypeReconfigureTLS,
+		ElasticsearchOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _ElasticsearchOpsRequestTypeValue = map[string]ElasticsearchOpsRequestType{
 	"Restart":           ElasticsearchOpsRequestTypeRestart,
 	"Reconfigure":       ElasticsearchOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    ElasticsearchOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        ElasticsearchOpsRequestTypeRotateAuth,
 }
 
 // ParseElasticsearchOpsRequestType attempts to convert a string to a ElasticsearchOpsRequestType.
diff --git a/apis/ops/v1alpha1/etcd_ops_types.go b/apis/ops/v1alpha1/etcd_ops_types.go
index 363edf494..4dae4e912 100644
--- a/apis/ops/v1alpha1/etcd_ops_types.go
+++ b/apis/ops/v1alpha1/etcd_ops_types.go
@@ -66,6 +66,8 @@ type EtcdOpsRequestSpec struct {
 	Configuration *EtcdCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// ApplyOption is to control the execution of OpsRequest depending on the database state.
@@ -73,8 +75,8 @@ type EtcdOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type EtcdOpsRequestType string
 
 // EtcdReplicaReadinessCriteria is the criteria for checking readiness of a Etcd pod
diff --git a/apis/ops/v1alpha1/etcd_ops_types_enum.go b/apis/ops/v1alpha1/etcd_ops_types_enum.go
index 55b45d722..822933689 100644
--- a/apis/ops/v1alpha1/etcd_ops_types_enum.go
+++ b/apis/ops/v1alpha1/etcd_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	EtcdOpsRequestTypeReconfigure EtcdOpsRequestType = "Reconfigure"
 	// EtcdOpsRequestTypeReconfigureTLS is a EtcdOpsRequestType of type ReconfigureTLS.
 	EtcdOpsRequestTypeReconfigureTLS EtcdOpsRequestType = "ReconfigureTLS"
+	// EtcdOpsRequestTypeRotateAuth is a EtcdOpsRequestType of type RotateAuth.
+	EtcdOpsRequestTypeRotateAuth EtcdOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidEtcdOpsRequestType = fmt.Errorf("not a valid EtcdOpsRequestType, try [%s]", strings.Join(_EtcdOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _EtcdOpsRequestTypeNames = []string{
 	string(EtcdOpsRequestTypeRestart),
 	string(EtcdOpsRequestTypeReconfigure),
 	string(EtcdOpsRequestTypeReconfigureTLS),
+	string(EtcdOpsRequestTypeRotateAuth),
 }
 
 // EtcdOpsRequestTypeNames returns a list of possible string values of EtcdOpsRequestType.
@@ -57,6 +60,7 @@ func EtcdOpsRequestTypeValues() []EtcdOpsRequestType {
 		EtcdOpsRequestTypeRestart,
 		EtcdOpsRequestTypeReconfigure,
 		EtcdOpsRequestTypeReconfigureTLS,
+		EtcdOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _EtcdOpsRequestTypeValue = map[string]EtcdOpsRequestType{
 	"Restart":           EtcdOpsRequestTypeRestart,
 	"Reconfigure":       EtcdOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    EtcdOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        EtcdOpsRequestTypeRotateAuth,
 }
 
 // ParseEtcdOpsRequestType attempts to convert a string to a EtcdOpsRequestType.
diff --git a/apis/ops/v1alpha1/ferretdb_ops.types.go b/apis/ops/v1alpha1/ferretdb_ops.types.go
index 7e86a23be..c144137d0 100644
--- a/apis/ops/v1alpha1/ferretdb_ops.types.go
+++ b/apis/ops/v1alpha1/ferretdb_ops.types.go
@@ -64,6 +64,8 @@ type FerretDBOpsRequestSpec struct {
 	VerticalScaling *FerretDBVerticalScalingSpec `json:"verticalScaling,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *FerretDBTLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -85,8 +87,8 @@ type FerretDBTLSSpec struct {
 	ClientAuthMode v1alpha2.ClusterAuthMode `json:"clientAuthMode,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;VerticalScaling;Restart;HorizontalScaling;ReconfigureTLS
-// ENUM(UpdateVersion, Restart, VerticalScaling, HorizontalScaling, ReconfigureTLS)
+// +kubebuilder:validation:Enum=UpdateVersion;VerticalScaling;Restart;HorizontalScaling;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, Restart, VerticalScaling, HorizontalScaling, ReconfigureTLS, RotateAuth)
 type FerretDBOpsRequestType string
 
 // FerretDBUpdateVersionSpec contains the update version information of a ferretdb cluster
diff --git a/apis/ops/v1alpha1/ferretdb_ops.types_enum.go b/apis/ops/v1alpha1/ferretdb_ops.types_enum.go
index 284db35ac..5bdf97d30 100644
--- a/apis/ops/v1alpha1/ferretdb_ops.types_enum.go
+++ b/apis/ops/v1alpha1/ferretdb_ops.types_enum.go
@@ -22,6 +22,8 @@ const (
 	FerretDBOpsRequestTypeHorizontalScaling FerretDBOpsRequestType = "HorizontalScaling"
 	// FerretDBOpsRequestTypeReconfigureTLS is a FerretDBOpsRequestType of type ReconfigureTLS.
 	FerretDBOpsRequestTypeReconfigureTLS FerretDBOpsRequestType = "ReconfigureTLS"
+	// FerretDBOpsRequestTypeRotateAuth is a FerretDBOpsRequestType of type RotateAuth.
+	FerretDBOpsRequestTypeRotateAuth FerretDBOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidFerretDBOpsRequestType = fmt.Errorf("not a valid FerretDBOpsRequestType, try [%s]", strings.Join(_FerretDBOpsRequestTypeNames, ", "))
@@ -32,6 +34,7 @@ var _FerretDBOpsRequestTypeNames = []string{
 	string(FerretDBOpsRequestTypeVerticalScaling),
 	string(FerretDBOpsRequestTypeHorizontalScaling),
 	string(FerretDBOpsRequestTypeReconfigureTLS),
+	string(FerretDBOpsRequestTypeRotateAuth),
 }
 
 // FerretDBOpsRequestTypeNames returns a list of possible string values of FerretDBOpsRequestType.
@@ -49,6 +52,7 @@ func FerretDBOpsRequestTypeValues() []FerretDBOpsRequestType {
 		FerretDBOpsRequestTypeVerticalScaling,
 		FerretDBOpsRequestTypeHorizontalScaling,
 		FerretDBOpsRequestTypeReconfigureTLS,
+		FerretDBOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -70,6 +74,7 @@ var _FerretDBOpsRequestTypeValue = map[string]FerretDBOpsRequestType{
 	"VerticalScaling":   FerretDBOpsRequestTypeVerticalScaling,
 	"HorizontalScaling": FerretDBOpsRequestTypeHorizontalScaling,
 	"ReconfigureTLS":    FerretDBOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        FerretDBOpsRequestTypeRotateAuth,
 }
 
 // ParseFerretDBOpsRequestType attempts to convert a string to a FerretDBOpsRequestType.
diff --git a/apis/ops/v1alpha1/kafka_ops_types.go b/apis/ops/v1alpha1/kafka_ops_types.go
index b42510ca9..cf995f98f 100644
--- a/apis/ops/v1alpha1/kafka_ops_types.go
+++ b/apis/ops/v1alpha1/kafka_ops_types.go
@@ -67,6 +67,8 @@ type KafkaOpsRequestSpec struct {
 	Configuration *KafkaCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -76,8 +78,8 @@ type KafkaOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type KafkaOpsRequestType string
 
 // KafkaReplicaReadinessCriteria is the criteria for checking readiness of a Kafka pod
diff --git a/apis/ops/v1alpha1/kafka_ops_types_enum.go b/apis/ops/v1alpha1/kafka_ops_types_enum.go
index 7b38b6be4..f669219f8 100644
--- a/apis/ops/v1alpha1/kafka_ops_types_enum.go
+++ b/apis/ops/v1alpha1/kafka_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	KafkaOpsRequestTypeReconfigure KafkaOpsRequestType = "Reconfigure"
 	// KafkaOpsRequestTypeReconfigureTLS is a KafkaOpsRequestType of type ReconfigureTLS.
 	KafkaOpsRequestTypeReconfigureTLS KafkaOpsRequestType = "ReconfigureTLS"
+	// KafkaOpsRequestTypeRotateAuth is a KafkaOpsRequestType of type RotateAuth.
+	KafkaOpsRequestTypeRotateAuth KafkaOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidKafkaOpsRequestType = fmt.Errorf("not a valid KafkaOpsRequestType, try [%s]", strings.Join(_KafkaOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _KafkaOpsRequestTypeNames = []string{
 	string(KafkaOpsRequestTypeRestart),
 	string(KafkaOpsRequestTypeReconfigure),
 	string(KafkaOpsRequestTypeReconfigureTLS),
+	string(KafkaOpsRequestTypeRotateAuth),
 }
 
 // KafkaOpsRequestTypeNames returns a list of possible string values of KafkaOpsRequestType.
@@ -57,6 +60,7 @@ func KafkaOpsRequestTypeValues() []KafkaOpsRequestType {
 		KafkaOpsRequestTypeRestart,
 		KafkaOpsRequestTypeReconfigure,
 		KafkaOpsRequestTypeReconfigureTLS,
+		KafkaOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _KafkaOpsRequestTypeValue = map[string]KafkaOpsRequestType{
 	"Restart":           KafkaOpsRequestTypeRestart,
 	"Reconfigure":       KafkaOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    KafkaOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        KafkaOpsRequestTypeRotateAuth,
 }
 
 // ParseKafkaOpsRequestType attempts to convert a string to a KafkaOpsRequestType.
diff --git a/apis/ops/v1alpha1/mariadb_ops_types.go b/apis/ops/v1alpha1/mariadb_ops_types.go
index 47e3e720d..52585bc60 100644
--- a/apis/ops/v1alpha1/mariadb_ops_types.go
+++ b/apis/ops/v1alpha1/mariadb_ops_types.go
@@ -67,6 +67,8 @@ type MariaDBOpsRequestSpec struct {
 	Configuration *MariaDBCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *MariaDBTLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -76,8 +78,8 @@ type MariaDBOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type MariaDBOpsRequestType string
 
 // MariaDBReplicaReadinessCriteria is the criteria for checking readiness of an MariaDB database
diff --git a/apis/ops/v1alpha1/mariadb_ops_types_enum.go b/apis/ops/v1alpha1/mariadb_ops_types_enum.go
index 45f85b1c1..e8eda6c60 100644
--- a/apis/ops/v1alpha1/mariadb_ops_types_enum.go
+++ b/apis/ops/v1alpha1/mariadb_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	MariaDBOpsRequestTypeReconfigure MariaDBOpsRequestType = "Reconfigure"
 	// MariaDBOpsRequestTypeReconfigureTLS is a MariaDBOpsRequestType of type ReconfigureTLS.
 	MariaDBOpsRequestTypeReconfigureTLS MariaDBOpsRequestType = "ReconfigureTLS"
+	// MariaDBOpsRequestTypeRotateAuth is a MariaDBOpsRequestType of type RotateAuth.
+	MariaDBOpsRequestTypeRotateAuth MariaDBOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidMariaDBOpsRequestType = fmt.Errorf("not a valid MariaDBOpsRequestType, try [%s]", strings.Join(_MariaDBOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _MariaDBOpsRequestTypeNames = []string{
 	string(MariaDBOpsRequestTypeRestart),
 	string(MariaDBOpsRequestTypeReconfigure),
 	string(MariaDBOpsRequestTypeReconfigureTLS),
+	string(MariaDBOpsRequestTypeRotateAuth),
 }
 
 // MariaDBOpsRequestTypeNames returns a list of possible string values of MariaDBOpsRequestType.
@@ -57,6 +60,7 @@ func MariaDBOpsRequestTypeValues() []MariaDBOpsRequestType {
 		MariaDBOpsRequestTypeRestart,
 		MariaDBOpsRequestTypeReconfigure,
 		MariaDBOpsRequestTypeReconfigureTLS,
+		MariaDBOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _MariaDBOpsRequestTypeValue = map[string]MariaDBOpsRequestType{
 	"Restart":           MariaDBOpsRequestTypeRestart,
 	"Reconfigure":       MariaDBOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    MariaDBOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        MariaDBOpsRequestTypeRotateAuth,
 }
 
 // ParseMariaDBOpsRequestType attempts to convert a string to a MariaDBOpsRequestType.
diff --git a/apis/ops/v1alpha1/memcached_ops_types.go b/apis/ops/v1alpha1/memcached_ops_types.go
index d13f7592e..a166ae93d 100644
--- a/apis/ops/v1alpha1/memcached_ops_types.go
+++ b/apis/ops/v1alpha1/memcached_ops_types.go
@@ -66,6 +66,8 @@ type MemcachedOpsRequestSpec struct {
 	Configuration *MemcachedCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -75,8 +77,8 @@ type MemcachedOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type MemcachedOpsRequestType string
 
 // MemcachedReplicaReadinessCriteria is the criteria for checking readiness of a Memcached pod
diff --git a/apis/ops/v1alpha1/memcached_ops_types_enum.go b/apis/ops/v1alpha1/memcached_ops_types_enum.go
index c77ec8a96..4b1645459 100644
--- a/apis/ops/v1alpha1/memcached_ops_types_enum.go
+++ b/apis/ops/v1alpha1/memcached_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	MemcachedOpsRequestTypeReconfigure MemcachedOpsRequestType = "Reconfigure"
 	// MemcachedOpsRequestTypeReconfigureTLS is a MemcachedOpsRequestType of type ReconfigureTLS.
 	MemcachedOpsRequestTypeReconfigureTLS MemcachedOpsRequestType = "ReconfigureTLS"
+	// MemcachedOpsRequestTypeRotateAuth is a MemcachedOpsRequestType of type RotateAuth.
+	MemcachedOpsRequestTypeRotateAuth MemcachedOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidMemcachedOpsRequestType = fmt.Errorf("not a valid MemcachedOpsRequestType, try [%s]", strings.Join(_MemcachedOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _MemcachedOpsRequestTypeNames = []string{
 	string(MemcachedOpsRequestTypeRestart),
 	string(MemcachedOpsRequestTypeReconfigure),
 	string(MemcachedOpsRequestTypeReconfigureTLS),
+	string(MemcachedOpsRequestTypeRotateAuth),
 }
 
 // MemcachedOpsRequestTypeNames returns a list of possible string values of MemcachedOpsRequestType.
@@ -57,6 +60,7 @@ func MemcachedOpsRequestTypeValues() []MemcachedOpsRequestType {
 		MemcachedOpsRequestTypeRestart,
 		MemcachedOpsRequestTypeReconfigure,
 		MemcachedOpsRequestTypeReconfigureTLS,
+		MemcachedOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _MemcachedOpsRequestTypeValue = map[string]MemcachedOpsRequestType{
 	"Restart":           MemcachedOpsRequestTypeRestart,
 	"Reconfigure":       MemcachedOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    MemcachedOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        MemcachedOpsRequestTypeRotateAuth,
 }
 
 // ParseMemcachedOpsRequestType attempts to convert a string to a MemcachedOpsRequestType.
diff --git a/apis/ops/v1alpha1/mongodb_ops_types.go b/apis/ops/v1alpha1/mongodb_ops_types.go
index baf5a7152..30e4975df 100644
--- a/apis/ops/v1alpha1/mongodb_ops_types.go
+++ b/apis/ops/v1alpha1/mongodb_ops_types.go
@@ -67,6 +67,8 @@ type MongoDBOpsRequestSpec struct {
 	Configuration *MongoDBCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Specifies information necessary for reprovisioning database
@@ -83,8 +85,8 @@ type MongoDBOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;Reprovision
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, Reprovision)
+// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;Reprovision;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, Reprovision, RotateAuth)
 type MongoDBOpsRequestType string
 
 // MongoDBReplicaReadinessCriteria is the criteria for checking readiness of a MongoDB pod
diff --git a/apis/ops/v1alpha1/mongodb_ops_types_enum.go b/apis/ops/v1alpha1/mongodb_ops_types_enum.go
index 753e52519..bed49cfc4 100644
--- a/apis/ops/v1alpha1/mongodb_ops_types_enum.go
+++ b/apis/ops/v1alpha1/mongodb_ops_types_enum.go
@@ -28,6 +28,8 @@ const (
 	MongoDBOpsRequestTypeReconfigureTLS MongoDBOpsRequestType = "ReconfigureTLS"
 	// MongoDBOpsRequestTypeReprovision is a MongoDBOpsRequestType of type Reprovision.
 	MongoDBOpsRequestTypeReprovision MongoDBOpsRequestType = "Reprovision"
+	// MongoDBOpsRequestTypeRotateAuth is a MongoDBOpsRequestType of type RotateAuth.
+	MongoDBOpsRequestTypeRotateAuth MongoDBOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidMongoDBOpsRequestType = fmt.Errorf("not a valid MongoDBOpsRequestType, try [%s]", strings.Join(_MongoDBOpsRequestTypeNames, ", "))
@@ -41,6 +43,7 @@ var _MongoDBOpsRequestTypeNames = []string{
 	string(MongoDBOpsRequestTypeReconfigure),
 	string(MongoDBOpsRequestTypeReconfigureTLS),
 	string(MongoDBOpsRequestTypeReprovision),
+	string(MongoDBOpsRequestTypeRotateAuth),
 }
 
 // MongoDBOpsRequestTypeNames returns a list of possible string values of MongoDBOpsRequestType.
@@ -61,6 +64,7 @@ func MongoDBOpsRequestTypeValues() []MongoDBOpsRequestType {
 		MongoDBOpsRequestTypeReconfigure,
 		MongoDBOpsRequestTypeReconfigureTLS,
 		MongoDBOpsRequestTypeReprovision,
+		MongoDBOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -85,6 +89,7 @@ var _MongoDBOpsRequestTypeValue = map[string]MongoDBOpsRequestType{
 	"Reconfigure":       MongoDBOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    MongoDBOpsRequestTypeReconfigureTLS,
 	"Reprovision":       MongoDBOpsRequestTypeReprovision,
+	"RotateAuth":        MongoDBOpsRequestTypeRotateAuth,
 }
 
 // ParseMongoDBOpsRequestType attempts to convert a string to a MongoDBOpsRequestType.
diff --git a/apis/ops/v1alpha1/mssqlserver_ops_types.go b/apis/ops/v1alpha1/mssqlserver_ops_types.go
index d7ccd1c1f..16a9100e9 100644
--- a/apis/ops/v1alpha1/mssqlserver_ops_types.go
+++ b/apis/ops/v1alpha1/mssqlserver_ops_types.go
@@ -67,6 +67,8 @@ type MSSQLServerOpsRequestSpec struct {
 	Configuration *MSSQLServerCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -76,8 +78,8 @@ type MSSQLServerOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type MSSQLServerOpsRequestType string
 
 // MSSQLServerReplicaReadinessCriteria is the criteria for checking readiness of a MSSQLServer pod
diff --git a/apis/ops/v1alpha1/mssqlserver_ops_types_enum.go b/apis/ops/v1alpha1/mssqlserver_ops_types_enum.go
index b3344ff88..442a476b7 100644
--- a/apis/ops/v1alpha1/mssqlserver_ops_types_enum.go
+++ b/apis/ops/v1alpha1/mssqlserver_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	MSSQLServerOpsRequestTypeReconfigure MSSQLServerOpsRequestType = "Reconfigure"
 	// MSSQLServerOpsRequestTypeReconfigureTLS is a MSSQLServerOpsRequestType of type ReconfigureTLS.
 	MSSQLServerOpsRequestTypeReconfigureTLS MSSQLServerOpsRequestType = "ReconfigureTLS"
+	// MSSQLServerOpsRequestTypeRotateAuth is a MSSQLServerOpsRequestType of type RotateAuth.
+	MSSQLServerOpsRequestTypeRotateAuth MSSQLServerOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidMSSQLServerOpsRequestType = fmt.Errorf("not a valid MSSQLServerOpsRequestType, try [%s]", strings.Join(_MSSQLServerOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _MSSQLServerOpsRequestTypeNames = []string{
 	string(MSSQLServerOpsRequestTypeRestart),
 	string(MSSQLServerOpsRequestTypeReconfigure),
 	string(MSSQLServerOpsRequestTypeReconfigureTLS),
+	string(MSSQLServerOpsRequestTypeRotateAuth),
 }
 
 // MSSQLServerOpsRequestTypeNames returns a list of possible string values of MSSQLServerOpsRequestType.
@@ -57,6 +60,7 @@ func MSSQLServerOpsRequestTypeValues() []MSSQLServerOpsRequestType {
 		MSSQLServerOpsRequestTypeRestart,
 		MSSQLServerOpsRequestTypeReconfigure,
 		MSSQLServerOpsRequestTypeReconfigureTLS,
+		MSSQLServerOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _MSSQLServerOpsRequestTypeValue = map[string]MSSQLServerOpsRequestType{
 	"Restart":           MSSQLServerOpsRequestTypeRestart,
 	"Reconfigure":       MSSQLServerOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    MSSQLServerOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        MSSQLServerOpsRequestTypeRotateAuth,
 }
 
 // ParseMSSQLServerOpsRequestType attempts to convert a string to a MSSQLServerOpsRequestType.
diff --git a/apis/ops/v1alpha1/mysql_ops_types.go b/apis/ops/v1alpha1/mysql_ops_types.go
index 03a02477b..ddc4d0815 100644
--- a/apis/ops/v1alpha1/mysql_ops_types.go
+++ b/apis/ops/v1alpha1/mysql_ops_types.go
@@ -67,6 +67,8 @@ type MySQLOpsRequestSpec struct {
 	Configuration *MySQLCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *MySQLTLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -76,8 +78,8 @@ type MySQLOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type MySQLOpsRequestType string
 
 // MySQLReplicaReadinessCriteria is the criteria for checking readiness of a MySQL pod
diff --git a/apis/ops/v1alpha1/mysql_ops_types_enum.go b/apis/ops/v1alpha1/mysql_ops_types_enum.go
index 7b9950f96..3e48bdf23 100644
--- a/apis/ops/v1alpha1/mysql_ops_types_enum.go
+++ b/apis/ops/v1alpha1/mysql_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	MySQLOpsRequestTypeReconfigure MySQLOpsRequestType = "Reconfigure"
 	// MySQLOpsRequestTypeReconfigureTLS is a MySQLOpsRequestType of type ReconfigureTLS.
 	MySQLOpsRequestTypeReconfigureTLS MySQLOpsRequestType = "ReconfigureTLS"
+	// MySQLOpsRequestTypeRotateAuth is a MySQLOpsRequestType of type RotateAuth.
+	MySQLOpsRequestTypeRotateAuth MySQLOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidMySQLOpsRequestType = fmt.Errorf("not a valid MySQLOpsRequestType, try [%s]", strings.Join(_MySQLOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _MySQLOpsRequestTypeNames = []string{
 	string(MySQLOpsRequestTypeRestart),
 	string(MySQLOpsRequestTypeReconfigure),
 	string(MySQLOpsRequestTypeReconfigureTLS),
+	string(MySQLOpsRequestTypeRotateAuth),
 }
 
 // MySQLOpsRequestTypeNames returns a list of possible string values of MySQLOpsRequestType.
@@ -57,6 +60,7 @@ func MySQLOpsRequestTypeValues() []MySQLOpsRequestType {
 		MySQLOpsRequestTypeRestart,
 		MySQLOpsRequestTypeReconfigure,
 		MySQLOpsRequestTypeReconfigureTLS,
+		MySQLOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _MySQLOpsRequestTypeValue = map[string]MySQLOpsRequestType{
 	"Restart":           MySQLOpsRequestTypeRestart,
 	"Reconfigure":       MySQLOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    MySQLOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        MySQLOpsRequestTypeRotateAuth,
 }
 
 // ParseMySQLOpsRequestType attempts to convert a string to a MySQLOpsRequestType.
diff --git a/apis/ops/v1alpha1/openapi_generated.go b/apis/ops/v1alpha1/openapi_generated.go
index d9d4f99b3..d1bf038a5 100644
--- a/apis/ops/v1alpha1/openapi_generated.go
+++ b/apis/ops/v1alpha1/openapi_generated.go
@@ -492,6 +492,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
 		"kmodules.xyz/offshoot-api/api/v1.Volume":                                                    schema_kmodulesxyz_offshoot_api_api_v1_Volume(ref),
 		"kmodules.xyz/offshoot-api/api/v1.VolumeSource":                                              schema_kmodulesxyz_offshoot_api_api_v1_VolumeSource(ref),
 		"kubedb.dev/apimachinery/apis/ops/v1alpha1.ArchiverOptions":                                  schema_apimachinery_apis_ops_v1alpha1_ArchiverOptions(ref),
+		"kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec":                                         schema_apimachinery_apis_ops_v1alpha1_AuthSpec(ref),
 		"kubedb.dev/apimachinery/apis/ops/v1alpha1.ClickHouseOpsRequest":                             schema_apimachinery_apis_ops_v1alpha1_ClickHouseOpsRequest(ref),
 		"kubedb.dev/apimachinery/apis/ops/v1alpha1.ClickHouseOpsRequestList":                         schema_apimachinery_apis_ops_v1alpha1_ClickHouseOpsRequestList(ref),
 		"kubedb.dev/apimachinery/apis/ops/v1alpha1.ClickHouseOpsRequestSpec":                         schema_apimachinery_apis_ops_v1alpha1_ClickHouseOpsRequestSpec(ref),
@@ -25535,6 +25536,26 @@ func schema_apimachinery_apis_ops_v1alpha1_ArchiverOptions(ref common.ReferenceC
 	}
 }
 
+func schema_apimachinery_apis_ops_v1alpha1_AuthSpec(ref common.ReferenceCallback) common.OpenAPIDefinition {
+	return common.OpenAPIDefinition{
+		Schema: spec.Schema{
+			SchemaProps: spec.SchemaProps{
+				Type: []string{"object"},
+				Properties: map[string]spec.Schema{
+					"secretRef": {
+						SchemaProps: spec.SchemaProps{
+							Description: "SecretRef holds the new authSecret If it is given, ops-manager will use this. Otherwise, will generate random password",
+							Ref:         ref("k8s.io/api/core/v1.LocalObjectReference"),
+						},
+					},
+				},
+			},
+		},
+		Dependencies: []string{
+			"k8s.io/api/core/v1.LocalObjectReference"},
+	}
+}
+
 func schema_apimachinery_apis_ops_v1alpha1_ClickHouseOpsRequest(ref common.ReferenceCallback) common.OpenAPIDefinition {
 	return common.OpenAPIDefinition{
 		Schema: spec.Schema{
@@ -25652,6 +25673,12 @@ func schema_apimachinery_apis_ops_v1alpha1_ClickHouseOpsRequestSpec(ref common.R
 							Format:      "",
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -25676,7 +25703,7 @@ func schema_apimachinery_apis_ops_v1alpha1_ClickHouseOpsRequestSpec(ref common.R
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
 	}
 }
 
@@ -25850,6 +25877,12 @@ func schema_apimachinery_apis_ops_v1alpha1_DruidOpsRequestSpec(ref common.Refere
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.DruidVolumeExpansionSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -25874,7 +25907,7 @@ func schema_apimachinery_apis_ops_v1alpha1_DruidOpsRequestSpec(ref common.Refere
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.DruidVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.DruidVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.DruidVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.DruidVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
 	}
 }
 
@@ -26318,6 +26351,12 @@ func schema_apimachinery_apis_ops_v1alpha1_ElasticsearchOpsRequestSpec(ref commo
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -26342,7 +26381,7 @@ func schema_apimachinery_apis_ops_v1alpha1_ElasticsearchOpsRequestSpec(ref commo
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ElasticsearchCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ElasticsearchHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ElasticsearchUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ElasticsearchVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ElasticsearchVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ElasticsearchCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ElasticsearchHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ElasticsearchUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ElasticsearchVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ElasticsearchVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -26759,6 +26798,12 @@ func schema_apimachinery_apis_ops_v1alpha1_EtcdOpsRequestSpec(ref common.Referen
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -26777,7 +26822,7 @@ func schema_apimachinery_apis_ops_v1alpha1_EtcdOpsRequestSpec(ref common.Referen
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "kubedb.dev/apimachinery/apis/ops/v1alpha1.EtcdCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.EtcdHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.EtcdUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.EtcdVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.EtcdVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.EtcdCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.EtcdHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.EtcdUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.EtcdVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.EtcdVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -27010,6 +27055,12 @@ func schema_apimachinery_apis_ops_v1alpha1_FerretDBOpsRequestSpec(ref common.Ref
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.FerretDBTLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -27034,7 +27085,7 @@ func schema_apimachinery_apis_ops_v1alpha1_FerretDBOpsRequestSpec(ref common.Ref
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.FerretDBHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.FerretDBTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.FerretDBUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.FerretDBVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.FerretDBHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.FerretDBTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.FerretDBUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.FerretDBVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
 	}
 }
 
@@ -27411,6 +27462,12 @@ func schema_apimachinery_apis_ops_v1alpha1_KafkaOpsRequestSpec(ref common.Refere
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -27435,7 +27492,7 @@ func schema_apimachinery_apis_ops_v1alpha1_KafkaOpsRequestSpec(ref common.Refere
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.KafkaCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.KafkaHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.KafkaUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.KafkaVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.KafkaVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.KafkaCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.KafkaHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.KafkaUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.KafkaVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.KafkaVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -27758,6 +27815,12 @@ func schema_apimachinery_apis_ops_v1alpha1_MSSQLServerOpsRequestSpec(ref common.
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -27782,7 +27845,7 @@ func schema_apimachinery_apis_ops_v1alpha1_MSSQLServerOpsRequestSpec(ref common.
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MSSQLServerCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MSSQLServerHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MSSQLServerUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MSSQLServerVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MSSQLServerVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MSSQLServerCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MSSQLServerHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MSSQLServerUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MSSQLServerVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MSSQLServerVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -28138,6 +28201,12 @@ func schema_apimachinery_apis_ops_v1alpha1_MariaDBOpsRequestSpec(ref common.Refe
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBTLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -28162,7 +28231,7 @@ func schema_apimachinery_apis_ops_v1alpha1_MariaDBOpsRequestSpec(ref common.Refe
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MariaDBVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
 	}
 }
 
@@ -28561,6 +28630,12 @@ func schema_apimachinery_apis_ops_v1alpha1_MemcachedOpsRequestSpec(ref common.Re
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -28585,7 +28660,7 @@ func schema_apimachinery_apis_ops_v1alpha1_MemcachedOpsRequestSpec(ref common.Re
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MemcachedCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MemcachedHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MemcachedUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MemcachedVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MemcachedVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MemcachedCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MemcachedHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MemcachedUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MemcachedVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MemcachedVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -28950,6 +29025,12 @@ func schema_apimachinery_apis_ops_v1alpha1_MongoDBOpsRequestSpec(ref common.Refe
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -28992,7 +29073,7 @@ func schema_apimachinery_apis_ops_v1alpha1_MongoDBOpsRequestSpec(ref common.Refe
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ArchiverOptions", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBReplicaReadinessCriteria", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.Reprovision", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ArchiverOptions", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBReplicaReadinessCriteria", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MongoDBVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.Reprovision", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -29404,6 +29485,12 @@ func schema_apimachinery_apis_ops_v1alpha1_MySQLOpsRequestSpec(ref common.Refere
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLTLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -29428,7 +29515,7 @@ func schema_apimachinery_apis_ops_v1alpha1_MySQLOpsRequestSpec(ref common.Refere
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.MySQLVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
 	}
 }
 
@@ -29928,6 +30015,12 @@ func schema_apimachinery_apis_ops_v1alpha1_PerconaXtraDBOpsRequestSpec(ref commo
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBTLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -29952,7 +30045,7 @@ func schema_apimachinery_apis_ops_v1alpha1_PerconaXtraDBOpsRequestSpec(ref commo
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PerconaXtraDBVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
 	}
 }
 
@@ -30325,6 +30418,12 @@ func schema_apimachinery_apis_ops_v1alpha1_PgBouncerOpsRequestSpec(ref common.Re
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -30349,7 +30448,7 @@ func schema_apimachinery_apis_ops_v1alpha1_PgBouncerOpsRequestSpec(ref common.Re
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgBouncerCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgBouncerHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgBouncerUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgBouncerVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgBouncerCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgBouncerHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgBouncerUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgBouncerVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -30608,6 +30707,12 @@ func schema_apimachinery_apis_ops_v1alpha1_PgpoolOpsRequestSpec(ref common.Refer
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolTLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -30632,7 +30737,7 @@ func schema_apimachinery_apis_ops_v1alpha1_PgpoolOpsRequestSpec(ref common.Refer
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PgpoolVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
 	}
 }
 
@@ -31038,6 +31143,12 @@ func schema_apimachinery_apis_ops_v1alpha1_PostgresOpsRequestSpec(ref common.Ref
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresTLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -31062,7 +31173,7 @@ func schema_apimachinery_apis_ops_v1alpha1_PostgresOpsRequestSpec(ref common.Ref
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.PostgresVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
 	}
 }
 
@@ -31457,6 +31568,12 @@ func schema_apimachinery_apis_ops_v1alpha1_ProxySQLOpsRequestSpec(ref common.Ref
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -31481,7 +31598,7 @@ func schema_apimachinery_apis_ops_v1alpha1_ProxySQLOpsRequestSpec(ref common.Ref
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ProxySQLCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ProxySQLHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ProxySQLUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ProxySQLVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ProxySQLCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ProxySQLHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ProxySQLUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ProxySQLVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -31759,6 +31876,12 @@ func schema_apimachinery_apis_ops_v1alpha1_RabbitMQOpsRequestSpec(ref common.Ref
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -31783,7 +31906,7 @@ func schema_apimachinery_apis_ops_v1alpha1_RabbitMQOpsRequestSpec(ref common.Ref
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RabbitMQCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RabbitMQHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RabbitMQUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RabbitMQVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RabbitMQVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RabbitMQCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RabbitMQHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RabbitMQUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RabbitMQVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RabbitMQVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -32087,6 +32210,12 @@ func schema_apimachinery_apis_ops_v1alpha1_RedisOpsRequestSpec(ref common.Refere
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisTLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -32117,7 +32246,7 @@ func schema_apimachinery_apis_ops_v1alpha1_RedisOpsRequestSpec(ref common.Refere
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisSentinelSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisSentinelSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisTLSSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec"},
 	}
 }
 
@@ -32338,6 +32467,12 @@ func schema_apimachinery_apis_ops_v1alpha1_RedisSentinelOpsRequestSpec(ref commo
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -32362,7 +32497,7 @@ func schema_apimachinery_apis_ops_v1alpha1_RedisSentinelOpsRequestSpec(ref commo
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisSentinelCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisSentinelHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisSentinelUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisSentinelVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisSentinelCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisSentinelHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisSentinelUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RedisSentinelVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -32931,6 +33066,12 @@ func schema_apimachinery_apis_ops_v1alpha1_SinglestoreOpsRequestSpec(ref common.
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"timeout": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.",
@@ -32949,7 +33090,7 @@ func schema_apimachinery_apis_ops_v1alpha1_SinglestoreOpsRequestSpec(ref common.
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SinglestoreCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SinglestoreHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SinglestoreUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SinglestoreVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SinglestoreVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SinglestoreCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SinglestoreHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SinglestoreUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SinglestoreVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SinglestoreVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -33296,6 +33437,12 @@ func schema_apimachinery_apis_ops_v1alpha1_SolrOpsRequestSpec(ref common.Referen
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"timeout": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.",
@@ -33314,7 +33461,7 @@ func schema_apimachinery_apis_ops_v1alpha1_SolrOpsRequestSpec(ref common.Referen
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SolrCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SolrHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SolrUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SolrVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SolrVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SolrCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SolrHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SolrUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SolrVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.SolrVolumeExpansionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.TLSSpec"},
 	}
 }
 
@@ -33708,6 +33855,12 @@ func schema_apimachinery_apis_ops_v1alpha1_ZooKeeperOpsRequestSpec(ref common.Re
 							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperCustomConfigurationSpec"),
 						},
 					},
+					"authentication": {
+						SchemaProps: spec.SchemaProps{
+							Description: "Specifies information necessary for configuring authSecret of the database",
+							Ref:         ref("kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec"),
+						},
+					},
 					"restart": {
 						SchemaProps: spec.SchemaProps{
 							Description: "Specifies information necessary for restarting database",
@@ -33732,7 +33885,7 @@ func schema_apimachinery_apis_ops_v1alpha1_ZooKeeperOpsRequestSpec(ref common.Re
 			},
 		},
 		Dependencies: []string{
-			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperVolumeExpansionSpec"},
+			"k8s.io/api/core/v1.LocalObjectReference", "k8s.io/apimachinery/pkg/apis/meta/v1.Duration", "kubedb.dev/apimachinery/apis/ops/v1alpha1.AuthSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.RestartSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperCustomConfigurationSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperHorizontalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperUpdateVersionSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperVerticalScalingSpec", "kubedb.dev/apimachinery/apis/ops/v1alpha1.ZooKeeperVolumeExpansionSpec"},
 	}
 }
 
diff --git a/apis/ops/v1alpha1/perconaxtradb_ops_types.go b/apis/ops/v1alpha1/perconaxtradb_ops_types.go
index 0032268c3..95319c5c1 100644
--- a/apis/ops/v1alpha1/perconaxtradb_ops_types.go
+++ b/apis/ops/v1alpha1/perconaxtradb_ops_types.go
@@ -67,6 +67,8 @@ type PerconaXtraDBOpsRequestSpec struct {
 	Configuration *PerconaXtraDBCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *PerconaXtraDBTLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -76,8 +78,8 @@ type PerconaXtraDBOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type PerconaXtraDBOpsRequestType string
 
 // PerconaXtraDBReplicaReadinessCriteria is the criteria for checking readiness of an PerconaXtraDB database
diff --git a/apis/ops/v1alpha1/perconaxtradb_ops_types_enum.go b/apis/ops/v1alpha1/perconaxtradb_ops_types_enum.go
index 36637c5b5..eda9705f9 100644
--- a/apis/ops/v1alpha1/perconaxtradb_ops_types_enum.go
+++ b/apis/ops/v1alpha1/perconaxtradb_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	PerconaXtraDBOpsRequestTypeReconfigure PerconaXtraDBOpsRequestType = "Reconfigure"
 	// PerconaXtraDBOpsRequestTypeReconfigureTLS is a PerconaXtraDBOpsRequestType of type ReconfigureTLS.
 	PerconaXtraDBOpsRequestTypeReconfigureTLS PerconaXtraDBOpsRequestType = "ReconfigureTLS"
+	// PerconaXtraDBOpsRequestTypeRotateAuth is a PerconaXtraDBOpsRequestType of type RotateAuth.
+	PerconaXtraDBOpsRequestTypeRotateAuth PerconaXtraDBOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidPerconaXtraDBOpsRequestType = fmt.Errorf("not a valid PerconaXtraDBOpsRequestType, try [%s]", strings.Join(_PerconaXtraDBOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _PerconaXtraDBOpsRequestTypeNames = []string{
 	string(PerconaXtraDBOpsRequestTypeRestart),
 	string(PerconaXtraDBOpsRequestTypeReconfigure),
 	string(PerconaXtraDBOpsRequestTypeReconfigureTLS),
+	string(PerconaXtraDBOpsRequestTypeRotateAuth),
 }
 
 // PerconaXtraDBOpsRequestTypeNames returns a list of possible string values of PerconaXtraDBOpsRequestType.
@@ -57,6 +60,7 @@ func PerconaXtraDBOpsRequestTypeValues() []PerconaXtraDBOpsRequestType {
 		PerconaXtraDBOpsRequestTypeRestart,
 		PerconaXtraDBOpsRequestTypeReconfigure,
 		PerconaXtraDBOpsRequestTypeReconfigureTLS,
+		PerconaXtraDBOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _PerconaXtraDBOpsRequestTypeValue = map[string]PerconaXtraDBOpsRequestType{
 	"Restart":           PerconaXtraDBOpsRequestTypeRestart,
 	"Reconfigure":       PerconaXtraDBOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    PerconaXtraDBOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        PerconaXtraDBOpsRequestTypeRotateAuth,
 }
 
 // ParsePerconaXtraDBOpsRequestType attempts to convert a string to a PerconaXtraDBOpsRequestType.
diff --git a/apis/ops/v1alpha1/pgbouncer_ops_types.go b/apis/ops/v1alpha1/pgbouncer_ops_types.go
index b679dc082..fa55b8209 100644
--- a/apis/ops/v1alpha1/pgbouncer_ops_types.go
+++ b/apis/ops/v1alpha1/pgbouncer_ops_types.go
@@ -64,6 +64,8 @@ type PgBouncerOpsRequestSpec struct {
 	Configuration *PgBouncerCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -73,8 +75,8 @@ type PgBouncerOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=HorizontalScaling;VerticalScaling;UpdateVersion;Reconfigure
-// ENUM(HorizontalScaling, VerticalScaling, UpdateVersion, Reconfigure)
+// +kubebuilder:validation:Enum=HorizontalScaling;VerticalScaling;UpdateVersion;Reconfigure;RotateAuth
+// ENUM(HorizontalScaling, VerticalScaling, UpdateVersion, Reconfigure, RotateAuth)
 type PgBouncerOpsRequestType string
 
 type PgBouncerUpdateVersionSpec struct {
diff --git a/apis/ops/v1alpha1/pgbouncer_ops_types_enum.go b/apis/ops/v1alpha1/pgbouncer_ops_types_enum.go
index 215cf3d4b..6043a822c 100644
--- a/apis/ops/v1alpha1/pgbouncer_ops_types_enum.go
+++ b/apis/ops/v1alpha1/pgbouncer_ops_types_enum.go
@@ -20,6 +20,8 @@ const (
 	PgBouncerOpsRequestTypeUpdateVersion PgBouncerOpsRequestType = "UpdateVersion"
 	// PgBouncerOpsRequestTypeReconfigure is a PgBouncerOpsRequestType of type Reconfigure.
 	PgBouncerOpsRequestTypeReconfigure PgBouncerOpsRequestType = "Reconfigure"
+	// PgBouncerOpsRequestTypeRotateAuth is a PgBouncerOpsRequestType of type RotateAuth.
+	PgBouncerOpsRequestTypeRotateAuth PgBouncerOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidPgBouncerOpsRequestType = fmt.Errorf("not a valid PgBouncerOpsRequestType, try [%s]", strings.Join(_PgBouncerOpsRequestTypeNames, ", "))
@@ -29,6 +31,7 @@ var _PgBouncerOpsRequestTypeNames = []string{
 	string(PgBouncerOpsRequestTypeVerticalScaling),
 	string(PgBouncerOpsRequestTypeUpdateVersion),
 	string(PgBouncerOpsRequestTypeReconfigure),
+	string(PgBouncerOpsRequestTypeRotateAuth),
 }
 
 // PgBouncerOpsRequestTypeNames returns a list of possible string values of PgBouncerOpsRequestType.
@@ -45,6 +48,7 @@ func PgBouncerOpsRequestTypeValues() []PgBouncerOpsRequestType {
 		PgBouncerOpsRequestTypeVerticalScaling,
 		PgBouncerOpsRequestTypeUpdateVersion,
 		PgBouncerOpsRequestTypeReconfigure,
+		PgBouncerOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -65,6 +69,7 @@ var _PgBouncerOpsRequestTypeValue = map[string]PgBouncerOpsRequestType{
 	"VerticalScaling":   PgBouncerOpsRequestTypeVerticalScaling,
 	"UpdateVersion":     PgBouncerOpsRequestTypeUpdateVersion,
 	"Reconfigure":       PgBouncerOpsRequestTypeReconfigure,
+	"RotateAuth":        PgBouncerOpsRequestTypeRotateAuth,
 }
 
 // ParsePgBouncerOpsRequestType attempts to convert a string to a PgBouncerOpsRequestType.
diff --git a/apis/ops/v1alpha1/pgpool_ops_types.go b/apis/ops/v1alpha1/pgpool_ops_types.go
index 0adfa55de..ac28f60f0 100644
--- a/apis/ops/v1alpha1/pgpool_ops_types.go
+++ b/apis/ops/v1alpha1/pgpool_ops_types.go
@@ -66,6 +66,8 @@ type PgpoolOpsRequestSpec struct {
 	Configuration *PgpoolCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *PgpoolTLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -87,8 +89,8 @@ type PgpoolTLSSpec struct {
 	ClientAuthMode v1alpha2.PgpoolClientAuthMode `json:"clientAuthMode,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;VerticalScaling;Reconfigure;Restart;HorizontalScaling;ReconfigureTLS
-// ENUM(UpdateVersion, Restart, Reconfigure, VerticalScaling, HorizontalScaling, ReconfigureTLS)
+// +kubebuilder:validation:Enum=UpdateVersion;VerticalScaling;Reconfigure;Restart;HorizontalScaling;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, Restart, Reconfigure, VerticalScaling, HorizontalScaling, ReconfigureTLS, RotateAuth)
 type PgpoolOpsRequestType string
 
 // PgpoolUpdateVersionSpec contains the update version information of a pgpool cluster
diff --git a/apis/ops/v1alpha1/pgpool_ops_types_enum.go b/apis/ops/v1alpha1/pgpool_ops_types_enum.go
index 04c36a612..05b6fad16 100644
--- a/apis/ops/v1alpha1/pgpool_ops_types_enum.go
+++ b/apis/ops/v1alpha1/pgpool_ops_types_enum.go
@@ -24,6 +24,8 @@ const (
 	PgpoolOpsRequestTypeHorizontalScaling PgpoolOpsRequestType = "HorizontalScaling"
 	// PgpoolOpsRequestTypeReconfigureTLS is a PgpoolOpsRequestType of type ReconfigureTLS.
 	PgpoolOpsRequestTypeReconfigureTLS PgpoolOpsRequestType = "ReconfigureTLS"
+	// PgpoolOpsRequestTypeRotateAuth is a PgpoolOpsRequestType of type RotateAuth.
+	PgpoolOpsRequestTypeRotateAuth PgpoolOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidPgpoolOpsRequestType = fmt.Errorf("not a valid PgpoolOpsRequestType, try [%s]", strings.Join(_PgpoolOpsRequestTypeNames, ", "))
@@ -35,6 +37,7 @@ var _PgpoolOpsRequestTypeNames = []string{
 	string(PgpoolOpsRequestTypeVerticalScaling),
 	string(PgpoolOpsRequestTypeHorizontalScaling),
 	string(PgpoolOpsRequestTypeReconfigureTLS),
+	string(PgpoolOpsRequestTypeRotateAuth),
 }
 
 // PgpoolOpsRequestTypeNames returns a list of possible string values of PgpoolOpsRequestType.
@@ -53,6 +56,7 @@ func PgpoolOpsRequestTypeValues() []PgpoolOpsRequestType {
 		PgpoolOpsRequestTypeVerticalScaling,
 		PgpoolOpsRequestTypeHorizontalScaling,
 		PgpoolOpsRequestTypeReconfigureTLS,
+		PgpoolOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -75,6 +79,7 @@ var _PgpoolOpsRequestTypeValue = map[string]PgpoolOpsRequestType{
 	"VerticalScaling":   PgpoolOpsRequestTypeVerticalScaling,
 	"HorizontalScaling": PgpoolOpsRequestTypeHorizontalScaling,
 	"ReconfigureTLS":    PgpoolOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        PgpoolOpsRequestTypeRotateAuth,
 }
 
 // ParsePgpoolOpsRequestType attempts to convert a string to a PgpoolOpsRequestType.
diff --git a/apis/ops/v1alpha1/postgres_ops_types.go b/apis/ops/v1alpha1/postgres_ops_types.go
index 99b15ac00..bc2839490 100644
--- a/apis/ops/v1alpha1/postgres_ops_types.go
+++ b/apis/ops/v1alpha1/postgres_ops_types.go
@@ -80,6 +80,8 @@ type PostgresOpsRequestSpec struct {
 	Configuration *PostgresCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *PostgresTLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -89,8 +91,8 @@ type PostgresOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=Upgrade;UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type PostgresOpsRequestType string
 
 type PostgresUpdateVersionSpec struct {
diff --git a/apis/ops/v1alpha1/postgres_ops_types_enum.go b/apis/ops/v1alpha1/postgres_ops_types_enum.go
index 4ec97d61b..e9dbf8951 100644
--- a/apis/ops/v1alpha1/postgres_ops_types_enum.go
+++ b/apis/ops/v1alpha1/postgres_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	PostgresOpsRequestTypeReconfigure PostgresOpsRequestType = "Reconfigure"
 	// PostgresOpsRequestTypeReconfigureTLS is a PostgresOpsRequestType of type ReconfigureTLS.
 	PostgresOpsRequestTypeReconfigureTLS PostgresOpsRequestType = "ReconfigureTLS"
+	// PostgresOpsRequestTypeRotateAuth is a PostgresOpsRequestType of type RotateAuth.
+	PostgresOpsRequestTypeRotateAuth PostgresOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidPostgresOpsRequestType = fmt.Errorf("not a valid PostgresOpsRequestType, try [%s]", strings.Join(_PostgresOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _PostgresOpsRequestTypeNames = []string{
 	string(PostgresOpsRequestTypeRestart),
 	string(PostgresOpsRequestTypeReconfigure),
 	string(PostgresOpsRequestTypeReconfigureTLS),
+	string(PostgresOpsRequestTypeRotateAuth),
 }
 
 // PostgresOpsRequestTypeNames returns a list of possible string values of PostgresOpsRequestType.
@@ -57,6 +60,7 @@ func PostgresOpsRequestTypeValues() []PostgresOpsRequestType {
 		PostgresOpsRequestTypeRestart,
 		PostgresOpsRequestTypeReconfigure,
 		PostgresOpsRequestTypeReconfigureTLS,
+		PostgresOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _PostgresOpsRequestTypeValue = map[string]PostgresOpsRequestType{
 	"Restart":           PostgresOpsRequestTypeRestart,
 	"Reconfigure":       PostgresOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    PostgresOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        PostgresOpsRequestTypeRotateAuth,
 }
 
 // ParsePostgresOpsRequestType attempts to convert a string to a PostgresOpsRequestType.
diff --git a/apis/ops/v1alpha1/proxysql_ops_types.go b/apis/ops/v1alpha1/proxysql_ops_types.go
index 98f76ac67..6fbe2f229 100644
--- a/apis/ops/v1alpha1/proxysql_ops_types.go
+++ b/apis/ops/v1alpha1/proxysql_ops_types.go
@@ -67,6 +67,8 @@ type ProxySQLOpsRequestSpec struct {
 	Configuration *ProxySQLCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -76,8 +78,8 @@ type ProxySQLOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type ProxySQLOpsRequestType string
 
 // ProxySQLReplicaReadinessCriteria is the criteria for checking readiness of a ProxySQL pod
diff --git a/apis/ops/v1alpha1/proxysql_ops_types_enum.go b/apis/ops/v1alpha1/proxysql_ops_types_enum.go
index 0339c2eaa..8e53368c2 100644
--- a/apis/ops/v1alpha1/proxysql_ops_types_enum.go
+++ b/apis/ops/v1alpha1/proxysql_ops_types_enum.go
@@ -24,6 +24,8 @@ const (
 	ProxySQLOpsRequestTypeReconfigure ProxySQLOpsRequestType = "Reconfigure"
 	// ProxySQLOpsRequestTypeReconfigureTLS is a ProxySQLOpsRequestType of type ReconfigureTLS.
 	ProxySQLOpsRequestTypeReconfigureTLS ProxySQLOpsRequestType = "ReconfigureTLS"
+	// ProxySQLOpsRequestTypeRotateAuth is a ProxySQLOpsRequestType of type RotateAuth.
+	ProxySQLOpsRequestTypeRotateAuth ProxySQLOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidProxySQLOpsRequestType = fmt.Errorf("not a valid ProxySQLOpsRequestType, try [%s]", strings.Join(_ProxySQLOpsRequestTypeNames, ", "))
@@ -35,6 +37,7 @@ var _ProxySQLOpsRequestTypeNames = []string{
 	string(ProxySQLOpsRequestTypeRestart),
 	string(ProxySQLOpsRequestTypeReconfigure),
 	string(ProxySQLOpsRequestTypeReconfigureTLS),
+	string(ProxySQLOpsRequestTypeRotateAuth),
 }
 
 // ProxySQLOpsRequestTypeNames returns a list of possible string values of ProxySQLOpsRequestType.
@@ -53,6 +56,7 @@ func ProxySQLOpsRequestTypeValues() []ProxySQLOpsRequestType {
 		ProxySQLOpsRequestTypeRestart,
 		ProxySQLOpsRequestTypeReconfigure,
 		ProxySQLOpsRequestTypeReconfigureTLS,
+		ProxySQLOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -75,6 +79,7 @@ var _ProxySQLOpsRequestTypeValue = map[string]ProxySQLOpsRequestType{
 	"Restart":           ProxySQLOpsRequestTypeRestart,
 	"Reconfigure":       ProxySQLOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    ProxySQLOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        ProxySQLOpsRequestTypeRotateAuth,
 }
 
 // ParseProxySQLOpsRequestType attempts to convert a string to a ProxySQLOpsRequestType.
diff --git a/apis/ops/v1alpha1/rabbitmq_ops_types.go b/apis/ops/v1alpha1/rabbitmq_ops_types.go
index 2ab637806..79f9d2a5f 100644
--- a/apis/ops/v1alpha1/rabbitmq_ops_types.go
+++ b/apis/ops/v1alpha1/rabbitmq_ops_types.go
@@ -67,6 +67,8 @@ type RabbitMQOpsRequestSpec struct {
 	Configuration *RabbitMQCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -76,8 +78,8 @@ type RabbitMQOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type RabbitMQOpsRequestType string
 
 // RabbitMQUpdateVersionSpec contains the update version information of a rabbitmq cluster
diff --git a/apis/ops/v1alpha1/rabbitmq_ops_types_enum.go b/apis/ops/v1alpha1/rabbitmq_ops_types_enum.go
index ee2c32470..117e4d42e 100644
--- a/apis/ops/v1alpha1/rabbitmq_ops_types_enum.go
+++ b/apis/ops/v1alpha1/rabbitmq_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	RabbitMQOpsRequestTypeReconfigure RabbitMQOpsRequestType = "Reconfigure"
 	// RabbitMQOpsRequestTypeReconfigureTLS is a RabbitMQOpsRequestType of type ReconfigureTLS.
 	RabbitMQOpsRequestTypeReconfigureTLS RabbitMQOpsRequestType = "ReconfigureTLS"
+	// RabbitMQOpsRequestTypeRotateAuth is a RabbitMQOpsRequestType of type RotateAuth.
+	RabbitMQOpsRequestTypeRotateAuth RabbitMQOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidRabbitMQOpsRequestType = fmt.Errorf("not a valid RabbitMQOpsRequestType, try [%s]", strings.Join(_RabbitMQOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _RabbitMQOpsRequestTypeNames = []string{
 	string(RabbitMQOpsRequestTypeRestart),
 	string(RabbitMQOpsRequestTypeReconfigure),
 	string(RabbitMQOpsRequestTypeReconfigureTLS),
+	string(RabbitMQOpsRequestTypeRotateAuth),
 }
 
 // RabbitMQOpsRequestTypeNames returns a list of possible string values of RabbitMQOpsRequestType.
@@ -57,6 +60,7 @@ func RabbitMQOpsRequestTypeValues() []RabbitMQOpsRequestType {
 		RabbitMQOpsRequestTypeRestart,
 		RabbitMQOpsRequestTypeReconfigure,
 		RabbitMQOpsRequestTypeReconfigureTLS,
+		RabbitMQOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _RabbitMQOpsRequestTypeValue = map[string]RabbitMQOpsRequestType{
 	"Restart":           RabbitMQOpsRequestTypeRestart,
 	"Reconfigure":       RabbitMQOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    RabbitMQOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        RabbitMQOpsRequestTypeRotateAuth,
 }
 
 // ParseRabbitMQOpsRequestType attempts to convert a string to a RabbitMQOpsRequestType.
diff --git a/apis/ops/v1alpha1/redis_ops_types.go b/apis/ops/v1alpha1/redis_ops_types.go
index 191225c8d..7c9d9c722 100644
--- a/apis/ops/v1alpha1/redis_ops_types.go
+++ b/apis/ops/v1alpha1/redis_ops_types.go
@@ -67,6 +67,8 @@ type RedisOpsRequestSpec struct {
 	Configuration *RedisCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *RedisTLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Specifies information necessary for replacing sentinel instances
@@ -78,8 +80,8 @@ type RedisOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;ReplaceSentinel
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, ReplaceSentinel)
+// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;ReconfigureTLS;ReplaceSentinel;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, ReconfigureTLS, ReplaceSentinel, RotateAuth)
 type RedisOpsRequestType string
 
 type RedisTLSSpec struct {
diff --git a/apis/ops/v1alpha1/redis_ops_types_enum.go b/apis/ops/v1alpha1/redis_ops_types_enum.go
index 65640e397..47b134a8b 100644
--- a/apis/ops/v1alpha1/redis_ops_types_enum.go
+++ b/apis/ops/v1alpha1/redis_ops_types_enum.go
@@ -28,6 +28,8 @@ const (
 	RedisOpsRequestTypeReconfigureTLS RedisOpsRequestType = "ReconfigureTLS"
 	// RedisOpsRequestTypeReplaceSentinel is a RedisOpsRequestType of type ReplaceSentinel.
 	RedisOpsRequestTypeReplaceSentinel RedisOpsRequestType = "ReplaceSentinel"
+	// RedisOpsRequestTypeRotateAuth is a RedisOpsRequestType of type RotateAuth.
+	RedisOpsRequestTypeRotateAuth RedisOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidRedisOpsRequestType = fmt.Errorf("not a valid RedisOpsRequestType, try [%s]", strings.Join(_RedisOpsRequestTypeNames, ", "))
@@ -41,6 +43,7 @@ var _RedisOpsRequestTypeNames = []string{
 	string(RedisOpsRequestTypeReconfigure),
 	string(RedisOpsRequestTypeReconfigureTLS),
 	string(RedisOpsRequestTypeReplaceSentinel),
+	string(RedisOpsRequestTypeRotateAuth),
 }
 
 // RedisOpsRequestTypeNames returns a list of possible string values of RedisOpsRequestType.
@@ -61,6 +64,7 @@ func RedisOpsRequestTypeValues() []RedisOpsRequestType {
 		RedisOpsRequestTypeReconfigure,
 		RedisOpsRequestTypeReconfigureTLS,
 		RedisOpsRequestTypeReplaceSentinel,
+		RedisOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -85,6 +89,7 @@ var _RedisOpsRequestTypeValue = map[string]RedisOpsRequestType{
 	"Reconfigure":       RedisOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    RedisOpsRequestTypeReconfigureTLS,
 	"ReplaceSentinel":   RedisOpsRequestTypeReplaceSentinel,
+	"RotateAuth":        RedisOpsRequestTypeRotateAuth,
 }
 
 // ParseRedisOpsRequestType attempts to convert a string to a RedisOpsRequestType.
diff --git a/apis/ops/v1alpha1/redis_sentinel_ops_types.go b/apis/ops/v1alpha1/redis_sentinel_ops_types.go
index 573526e66..c2adc2899 100644
--- a/apis/ops/v1alpha1/redis_sentinel_ops_types.go
+++ b/apis/ops/v1alpha1/redis_sentinel_ops_types.go
@@ -65,6 +65,8 @@ type RedisSentinelOpsRequestSpec struct {
 	Configuration *RedisSentinelCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
@@ -74,8 +76,8 @@ type RedisSentinelOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;Restart;Reconfigure;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, Restart, Reconfigure, ReconfigureTLS)
+// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;Restart;Reconfigure;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, Restart, Reconfigure, ReconfigureTLS, RotateAuth)
 type RedisSentinelOpsRequestType string
 
 // RedisSentinelReplicaReadinessCriteria is the criteria for checking readiness of a RedisSentinel pod
diff --git a/apis/ops/v1alpha1/redis_sentinel_ops_types_enum.go b/apis/ops/v1alpha1/redis_sentinel_ops_types_enum.go
index 51a54c7eb..bde87bdaa 100644
--- a/apis/ops/v1alpha1/redis_sentinel_ops_types_enum.go
+++ b/apis/ops/v1alpha1/redis_sentinel_ops_types_enum.go
@@ -24,6 +24,8 @@ const (
 	RedisSentinelOpsRequestTypeReconfigure RedisSentinelOpsRequestType = "Reconfigure"
 	// RedisSentinelOpsRequestTypeReconfigureTLS is a RedisSentinelOpsRequestType of type ReconfigureTLS.
 	RedisSentinelOpsRequestTypeReconfigureTLS RedisSentinelOpsRequestType = "ReconfigureTLS"
+	// RedisSentinelOpsRequestTypeRotateAuth is a RedisSentinelOpsRequestType of type RotateAuth.
+	RedisSentinelOpsRequestTypeRotateAuth RedisSentinelOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidRedisSentinelOpsRequestType = fmt.Errorf("not a valid RedisSentinelOpsRequestType, try [%s]", strings.Join(_RedisSentinelOpsRequestTypeNames, ", "))
@@ -35,6 +37,7 @@ var _RedisSentinelOpsRequestTypeNames = []string{
 	string(RedisSentinelOpsRequestTypeRestart),
 	string(RedisSentinelOpsRequestTypeReconfigure),
 	string(RedisSentinelOpsRequestTypeReconfigureTLS),
+	string(RedisSentinelOpsRequestTypeRotateAuth),
 }
 
 // RedisSentinelOpsRequestTypeNames returns a list of possible string values of RedisSentinelOpsRequestType.
@@ -53,6 +56,7 @@ func RedisSentinelOpsRequestTypeValues() []RedisSentinelOpsRequestType {
 		RedisSentinelOpsRequestTypeRestart,
 		RedisSentinelOpsRequestTypeReconfigure,
 		RedisSentinelOpsRequestTypeReconfigureTLS,
+		RedisSentinelOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -75,6 +79,7 @@ var _RedisSentinelOpsRequestTypeValue = map[string]RedisSentinelOpsRequestType{
 	"Restart":           RedisSentinelOpsRequestTypeRestart,
 	"Reconfigure":       RedisSentinelOpsRequestTypeReconfigure,
 	"ReconfigureTLS":    RedisSentinelOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        RedisSentinelOpsRequestTypeRotateAuth,
 }
 
 // ParseRedisSentinelOpsRequestType attempts to convert a string to a RedisSentinelOpsRequestType.
diff --git a/apis/ops/v1alpha1/singlestore_ops_types.go b/apis/ops/v1alpha1/singlestore_ops_types.go
index 133624af1..ec6072dfb 100644
--- a/apis/ops/v1alpha1/singlestore_ops_types.go
+++ b/apis/ops/v1alpha1/singlestore_ops_types.go
@@ -69,6 +69,8 @@ type SinglestoreOpsRequestSpec struct {
 	Configuration *SinglestoreCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
 	Timeout *metav1.Duration `json:"timeout,omitempty"`
 	// ApplyOption is to control the execution of OpsRequest depending on the database state.
@@ -76,8 +78,8 @@ type SinglestoreOpsRequestSpec struct {
 	Apply ApplyOption `json:"apply,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Configuration;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Configuration, ReconfigureTLS)
+// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Configuration;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Configuration, ReconfigureTLS, RotateAuth)
 type SinglestoreOpsRequestType string
 
 // SinglestoreUpdateVersionSpec contains the update version information of a kafka cluster
diff --git a/apis/ops/v1alpha1/singlestore_ops_types_enum.go b/apis/ops/v1alpha1/singlestore_ops_types_enum.go
index 110ec9e9e..3622b7dc1 100644
--- a/apis/ops/v1alpha1/singlestore_ops_types_enum.go
+++ b/apis/ops/v1alpha1/singlestore_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	SinglestoreOpsRequestTypeConfiguration SinglestoreOpsRequestType = "Configuration"
 	// SinglestoreOpsRequestTypeReconfigureTLS is a SinglestoreOpsRequestType of type ReconfigureTLS.
 	SinglestoreOpsRequestTypeReconfigureTLS SinglestoreOpsRequestType = "ReconfigureTLS"
+	// SinglestoreOpsRequestTypeRotateAuth is a SinglestoreOpsRequestType of type RotateAuth.
+	SinglestoreOpsRequestTypeRotateAuth SinglestoreOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidSinglestoreOpsRequestType = fmt.Errorf("not a valid SinglestoreOpsRequestType, try [%s]", strings.Join(_SinglestoreOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _SinglestoreOpsRequestTypeNames = []string{
 	string(SinglestoreOpsRequestTypeRestart),
 	string(SinglestoreOpsRequestTypeConfiguration),
 	string(SinglestoreOpsRequestTypeReconfigureTLS),
+	string(SinglestoreOpsRequestTypeRotateAuth),
 }
 
 // SinglestoreOpsRequestTypeNames returns a list of possible string values of SinglestoreOpsRequestType.
@@ -57,6 +60,7 @@ func SinglestoreOpsRequestTypeValues() []SinglestoreOpsRequestType {
 		SinglestoreOpsRequestTypeRestart,
 		SinglestoreOpsRequestTypeConfiguration,
 		SinglestoreOpsRequestTypeReconfigureTLS,
+		SinglestoreOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _SinglestoreOpsRequestTypeValue = map[string]SinglestoreOpsRequestType{
 	"Restart":           SinglestoreOpsRequestTypeRestart,
 	"Configuration":     SinglestoreOpsRequestTypeConfiguration,
 	"ReconfigureTLS":    SinglestoreOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        SinglestoreOpsRequestTypeRotateAuth,
 }
 
 // ParseSinglestoreOpsRequestType attempts to convert a string to a SinglestoreOpsRequestType.
diff --git a/apis/ops/v1alpha1/solr_ops_types.go b/apis/ops/v1alpha1/solr_ops_types.go
index 7323d1d38..63254642b 100644
--- a/apis/ops/v1alpha1/solr_ops_types.go
+++ b/apis/ops/v1alpha1/solr_ops_types.go
@@ -49,8 +49,8 @@ type SolrOpsRequest struct {
 	Status            OpsRequestStatus   `json:"status,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Reconfigure;Restart;ReconfigureTLS
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Reconfigure, Restart, ReconfigureTLS)
+// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Reconfigure;Restart;ReconfigureTLS;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Reconfigure, Restart, ReconfigureTLS, RotateAuth)
 type SolrOpsRequestType string
 
 // SolrOpsRequestSpec is the spec for SolrOpsRequest
@@ -73,6 +73,8 @@ type SolrOpsRequestSpec struct {
 	Configuration *SolrCustomConfigurationSpec `json:"configuration,omitempty"`
 	// Specifies information necessary for configuring TLS
 	TLS *TLSSpec `json:"tls,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
 	Timeout *metav1.Duration `json:"timeout,omitempty"`
 	// ApplyOption is to control the execution of OpsRequest depending on the database state.
diff --git a/apis/ops/v1alpha1/solr_ops_types_enum.go b/apis/ops/v1alpha1/solr_ops_types_enum.go
index c66e37b44..ce362e34d 100644
--- a/apis/ops/v1alpha1/solr_ops_types_enum.go
+++ b/apis/ops/v1alpha1/solr_ops_types_enum.go
@@ -26,6 +26,8 @@ const (
 	SolrOpsRequestTypeRestart SolrOpsRequestType = "Restart"
 	// SolrOpsRequestTypeReconfigureTLS is a SolrOpsRequestType of type ReconfigureTLS.
 	SolrOpsRequestTypeReconfigureTLS SolrOpsRequestType = "ReconfigureTLS"
+	// SolrOpsRequestTypeRotateAuth is a SolrOpsRequestType of type RotateAuth.
+	SolrOpsRequestTypeRotateAuth SolrOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidSolrOpsRequestType = fmt.Errorf("not a valid SolrOpsRequestType, try [%s]", strings.Join(_SolrOpsRequestTypeNames, ", "))
@@ -38,6 +40,7 @@ var _SolrOpsRequestTypeNames = []string{
 	string(SolrOpsRequestTypeReconfigure),
 	string(SolrOpsRequestTypeRestart),
 	string(SolrOpsRequestTypeReconfigureTLS),
+	string(SolrOpsRequestTypeRotateAuth),
 }
 
 // SolrOpsRequestTypeNames returns a list of possible string values of SolrOpsRequestType.
@@ -57,6 +60,7 @@ func SolrOpsRequestTypeValues() []SolrOpsRequestType {
 		SolrOpsRequestTypeReconfigure,
 		SolrOpsRequestTypeRestart,
 		SolrOpsRequestTypeReconfigureTLS,
+		SolrOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -80,6 +84,7 @@ var _SolrOpsRequestTypeValue = map[string]SolrOpsRequestType{
 	"Reconfigure":       SolrOpsRequestTypeReconfigure,
 	"Restart":           SolrOpsRequestTypeRestart,
 	"ReconfigureTLS":    SolrOpsRequestTypeReconfigureTLS,
+	"RotateAuth":        SolrOpsRequestTypeRotateAuth,
 }
 
 // ParseSolrOpsRequestType attempts to convert a string to a SolrOpsRequestType.
diff --git a/apis/ops/v1alpha1/type.go b/apis/ops/v1alpha1/type.go
index 36e1aaf72..2e7a51dd4 100644
--- a/apis/ops/v1alpha1/type.go
+++ b/apis/ops/v1alpha1/type.go
@@ -92,6 +92,12 @@ type TLSSpec struct {
 	Remove bool `json:"remove,omitempty"`
 }
 
+type AuthSpec struct {
+	// SecretRef holds the new authSecret
+	// If it is given, ops-manager will use this. Otherwise, will generate random password
+	SecretRef *core.LocalObjectReference `json:"secretRef,omitempty"`
+}
+
 // +kubebuilder:validation:Enum=IfReady;Always
 type ApplyOption string
 
diff --git a/apis/ops/v1alpha1/zookeeper_ops_types.go b/apis/ops/v1alpha1/zookeeper_ops_types.go
index 06c3c8ee0..0df09f834 100644
--- a/apis/ops/v1alpha1/zookeeper_ops_types.go
+++ b/apis/ops/v1alpha1/zookeeper_ops_types.go
@@ -49,8 +49,8 @@ type ZooKeeperOpsRequest struct {
 	Status            OpsRequestStatus        `json:"status,omitempty"`
 }
 
-// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure
-// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure)
+// +kubebuilder:validation:Enum=UpdateVersion;HorizontalScaling;VerticalScaling;VolumeExpansion;Restart;Reconfigure;RotateAuth
+// ENUM(UpdateVersion, HorizontalScaling, VerticalScaling, VolumeExpansion, Restart, Reconfigure, RotateAuth)
 type ZooKeeperOpsRequestType string
 
 // ZooKeeperOpsRequestSpec is the spec for ZooKeeperOpsRequest
@@ -69,6 +69,8 @@ type ZooKeeperOpsRequestSpec struct {
 	VolumeExpansion *ZooKeeperVolumeExpansionSpec `json:"volumeExpansion,omitempty"`
 	// Specifies information necessary for custom configuration of zookeeper
 	Configuration *ZooKeeperCustomConfigurationSpec `json:"configuration,omitempty"`
+	// Specifies information necessary for configuring authSecret of the database
+	Authentication *AuthSpec `json:"authentication,omitempty"`
 	// Specifies information necessary for restarting database
 	Restart *RestartSpec `json:"restart,omitempty"`
 	// Timeout for each step of the ops request in second. If a step doesn't finish within the specified timeout, the ops request will result in failure.
diff --git a/apis/ops/v1alpha1/zookeeper_ops_types_enum.go b/apis/ops/v1alpha1/zookeeper_ops_types_enum.go
index 52a742705..5a5465eb8 100644
--- a/apis/ops/v1alpha1/zookeeper_ops_types_enum.go
+++ b/apis/ops/v1alpha1/zookeeper_ops_types_enum.go
@@ -24,6 +24,8 @@ const (
 	ZooKeeperOpsRequestTypeRestart ZooKeeperOpsRequestType = "Restart"
 	// ZooKeeperOpsRequestTypeReconfigure is a ZooKeeperOpsRequestType of type Reconfigure.
 	ZooKeeperOpsRequestTypeReconfigure ZooKeeperOpsRequestType = "Reconfigure"
+	// ZooKeeperOpsRequestTypeRotateAuth is a ZooKeeperOpsRequestType of type RotateAuth.
+	ZooKeeperOpsRequestTypeRotateAuth ZooKeeperOpsRequestType = "RotateAuth"
 )
 
 var ErrInvalidZooKeeperOpsRequestType = fmt.Errorf("not a valid ZooKeeperOpsRequestType, try [%s]", strings.Join(_ZooKeeperOpsRequestTypeNames, ", "))
@@ -35,6 +37,7 @@ var _ZooKeeperOpsRequestTypeNames = []string{
 	string(ZooKeeperOpsRequestTypeVolumeExpansion),
 	string(ZooKeeperOpsRequestTypeRestart),
 	string(ZooKeeperOpsRequestTypeReconfigure),
+	string(ZooKeeperOpsRequestTypeRotateAuth),
 }
 
 // ZooKeeperOpsRequestTypeNames returns a list of possible string values of ZooKeeperOpsRequestType.
@@ -53,6 +56,7 @@ func ZooKeeperOpsRequestTypeValues() []ZooKeeperOpsRequestType {
 		ZooKeeperOpsRequestTypeVolumeExpansion,
 		ZooKeeperOpsRequestTypeRestart,
 		ZooKeeperOpsRequestTypeReconfigure,
+		ZooKeeperOpsRequestTypeRotateAuth,
 	}
 }
 
@@ -75,6 +79,7 @@ var _ZooKeeperOpsRequestTypeValue = map[string]ZooKeeperOpsRequestType{
 	"VolumeExpansion":   ZooKeeperOpsRequestTypeVolumeExpansion,
 	"Restart":           ZooKeeperOpsRequestTypeRestart,
 	"Reconfigure":       ZooKeeperOpsRequestTypeReconfigure,
+	"RotateAuth":        ZooKeeperOpsRequestTypeRotateAuth,
 }
 
 // ParseZooKeeperOpsRequestType attempts to convert a string to a ZooKeeperOpsRequestType.
diff --git a/apis/ops/v1alpha1/zz_generated.deepcopy.go b/apis/ops/v1alpha1/zz_generated.deepcopy.go
index d6a5fa76b..4a04a6176 100644
--- a/apis/ops/v1alpha1/zz_generated.deepcopy.go
+++ b/apis/ops/v1alpha1/zz_generated.deepcopy.go
@@ -24,8 +24,8 @@ package v1alpha1
 import (
 	v1alpha2 "kubedb.dev/apimachinery/apis/kubedb/v1alpha2"
 
-	corev1 "k8s.io/api/core/v1"
-	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	v1 "k8s.io/api/core/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	runtime "k8s.io/apimachinery/pkg/runtime"
 	apiv1 "kmodules.xyz/client-go/api/v1"
 )
@@ -47,6 +47,27 @@ func (in *ArchiverOptions) DeepCopy() *ArchiverOptions {
 	return out
 }
 
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *AuthSpec) DeepCopyInto(out *AuthSpec) {
+	*out = *in
+	if in.SecretRef != nil {
+		in, out := &in.SecretRef, &out.SecretRef
+		*out = new(v1.LocalObjectReference)
+		**out = **in
+	}
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AuthSpec.
+func (in *AuthSpec) DeepCopy() *AuthSpec {
+	if in == nil {
+		return nil
+	}
+	out := new(AuthSpec)
+	in.DeepCopyInto(out)
+	return out
+}
+
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
 func (in *ClickHouseOpsRequest) DeepCopyInto(out *ClickHouseOpsRequest) {
 	*out = *in
@@ -112,6 +133,11 @@ func (in *ClickHouseOpsRequestList) DeepCopyObject() runtime.Object {
 func (in *ClickHouseOpsRequestSpec) DeepCopyInto(out *ClickHouseOpsRequestSpec) {
 	*out = *in
 	out.DatabaseRef = in.DatabaseRef
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -119,7 +145,7 @@ func (in *ClickHouseOpsRequestSpec) DeepCopyInto(out *ClickHouseOpsRequestSpec)
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -243,6 +269,11 @@ func (in *DruidOpsRequestSpec) DeepCopyInto(out *DruidOpsRequestSpec) {
 		*out = new(DruidVolumeExpansionSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -250,7 +281,7 @@ func (in *DruidOpsRequestSpec) DeepCopyInto(out *DruidOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -343,7 +374,7 @@ func (in *ElasticsearchCustomConfiguration) DeepCopyInto(out *ElasticsearchCusto
 	*out = *in
 	if in.ConfigMap != nil {
 		in, out := &in.ConfigMap, &out.ConfigMap
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.Data != nil {
@@ -371,12 +402,12 @@ func (in *ElasticsearchCustomConfigurationSpec) DeepCopyInto(out *ElasticsearchC
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.SecureConfigSecret != nil {
 		in, out := &in.SecureConfigSecret, &out.SecureConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -591,6 +622,11 @@ func (in *ElasticsearchOpsRequestSpec) DeepCopyInto(out *ElasticsearchOpsRequest
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -598,7 +634,7 @@ func (in *ElasticsearchOpsRequestSpec) DeepCopyInto(out *ElasticsearchOpsRequest
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -808,7 +844,7 @@ func (in *EtcdCustomConfiguration) DeepCopyInto(out *EtcdCustomConfiguration) {
 	*out = *in
 	if in.ConfigMap != nil {
 		in, out := &in.ConfigMap, &out.ConfigMap
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.Data != nil {
@@ -958,6 +994,11 @@ func (in *EtcdOpsRequestSpec) DeepCopyInto(out *EtcdOpsRequestSpec) {
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -1156,6 +1197,11 @@ func (in *FerretDBOpsRequestSpec) DeepCopyInto(out *FerretDBOpsRequestSpec) {
 		*out = new(FerretDBTLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -1163,7 +1209,7 @@ func (in *FerretDBOpsRequestSpec) DeepCopyInto(out *FerretDBOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -1254,7 +1300,7 @@ func (in *KafkaCustomConfigurationSpec) DeepCopyInto(out *KafkaCustomConfigurati
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -1424,6 +1470,11 @@ func (in *KafkaOpsRequestSpec) DeepCopyInto(out *KafkaOpsRequestSpec) {
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -1431,7 +1482,7 @@ func (in *KafkaOpsRequestSpec) DeepCopyInto(out *KafkaOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -1546,7 +1597,7 @@ func (in *MSSQLServerCustomConfigurationSpec) DeepCopyInto(out *MSSQLServerCusto
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -1685,6 +1736,11 @@ func (in *MSSQLServerOpsRequestSpec) DeepCopyInto(out *MSSQLServerOpsRequestSpec
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -1692,7 +1748,7 @@ func (in *MSSQLServerOpsRequestSpec) DeepCopyInto(out *MSSQLServerOpsRequestSpec
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -1797,7 +1853,7 @@ func (in *MariaDBCustomConfiguration) DeepCopyInto(out *MariaDBCustomConfigurati
 	*out = *in
 	if in.ConfigMap != nil {
 		in, out := &in.ConfigMap, &out.ConfigMap
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.Data != nil {
@@ -1825,7 +1881,7 @@ func (in *MariaDBCustomConfigurationSpec) DeepCopyInto(out *MariaDBCustomConfigu
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -1964,6 +2020,11 @@ func (in *MariaDBOpsRequestSpec) DeepCopyInto(out *MariaDBOpsRequestSpec) {
 		*out = new(MariaDBTLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -1971,7 +2032,7 @@ func (in *MariaDBOpsRequestSpec) DeepCopyInto(out *MariaDBOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -2098,7 +2159,7 @@ func (in *MemcachedCustomConfiguration) DeepCopyInto(out *MemcachedCustomConfigu
 	*out = *in
 	if in.ConfigMap != nil {
 		in, out := &in.ConfigMap, &out.ConfigMap
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.Data != nil {
@@ -2126,7 +2187,7 @@ func (in *MemcachedCustomConfigurationSpec) DeepCopyInto(out *MemcachedCustomCon
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -2265,6 +2326,11 @@ func (in *MemcachedOpsRequestSpec) DeepCopyInto(out *MemcachedOpsRequestSpec) {
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -2272,7 +2338,7 @@ func (in *MemcachedOpsRequestSpec) DeepCopyInto(out *MemcachedOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -2377,7 +2443,7 @@ func (in *MongoDBCustomConfiguration) DeepCopyInto(out *MongoDBCustomConfigurati
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -2587,6 +2653,11 @@ func (in *MongoDBOpsRequestSpec) DeepCopyInto(out *MongoDBOpsRequestSpec) {
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -2609,7 +2680,7 @@ func (in *MongoDBOpsRequestSpec) DeepCopyInto(out *MongoDBOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -2796,7 +2867,7 @@ func (in *MySQLCustomConfigurationSpec) DeepCopyInto(out *MySQLCustomConfigurati
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -2935,6 +3006,11 @@ func (in *MySQLOpsRequestSpec) DeepCopyInto(out *MySQLOpsRequestSpec) {
 		*out = new(MySQLTLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -2942,7 +3018,7 @@ func (in *MySQLOpsRequestSpec) DeepCopyInto(out *MySQLOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -3152,7 +3228,7 @@ func (in *PerconaXtraDBCustomConfigurationSpec) DeepCopyInto(out *PerconaXtraDBC
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -3291,6 +3367,11 @@ func (in *PerconaXtraDBOpsRequestSpec) DeepCopyInto(out *PerconaXtraDBOpsRequest
 		*out = new(PerconaXtraDBTLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -3298,7 +3379,7 @@ func (in *PerconaXtraDBOpsRequestSpec) DeepCopyInto(out *PerconaXtraDBOpsRequest
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -3425,7 +3506,7 @@ func (in *PgBouncerCustomConfiguration) DeepCopyInto(out *PgBouncerCustomConfigu
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -3580,6 +3661,11 @@ func (in *PgBouncerOpsRequestSpec) DeepCopyInto(out *PgBouncerOpsRequestSpec) {
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -3587,7 +3673,7 @@ func (in *PgBouncerOpsRequestSpec) DeepCopyInto(out *PgBouncerOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -3650,7 +3736,7 @@ func (in *PgpoolCustomConfigurationSpec) DeepCopyInto(out *PgpoolCustomConfigura
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -3784,6 +3870,11 @@ func (in *PgpoolOpsRequestSpec) DeepCopyInto(out *PgpoolOpsRequestSpec) {
 		*out = new(PgpoolTLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -3791,7 +3882,7 @@ func (in *PgpoolOpsRequestSpec) DeepCopyInto(out *PgpoolOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -3888,7 +3979,7 @@ func (in *PostgresCustomConfiguration) DeepCopyInto(out *PostgresCustomConfigura
 	*out = *in
 	if in.ConfigMap != nil {
 		in, out := &in.ConfigMap, &out.ConfigMap
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.Data != nil {
@@ -3916,7 +4007,7 @@ func (in *PostgresCustomConfigurationSpec) DeepCopyInto(out *PostgresCustomConfi
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -4065,6 +4156,11 @@ func (in *PostgresOpsRequestSpec) DeepCopyInto(out *PostgresOpsRequestSpec) {
 		*out = new(PostgresTLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -4072,7 +4168,7 @@ func (in *PostgresOpsRequestSpec) DeepCopyInto(out *PostgresOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -4188,7 +4284,7 @@ func (in *ProxySQLCustomConfiguration) DeepCopyInto(out *ProxySQLCustomConfigura
 	*out = *in
 	if in.ConfigMap != nil {
 		in, out := &in.ConfigMap, &out.ConfigMap
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.Data != nil {
@@ -4358,6 +4454,11 @@ func (in *ProxySQLOpsRequestSpec) DeepCopyInto(out *ProxySQLOpsRequestSpec) {
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -4365,7 +4466,7 @@ func (in *ProxySQLOpsRequestSpec) DeepCopyInto(out *ProxySQLOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -4444,7 +4545,7 @@ func (in *RabbitMQCustomConfigurationSpec) DeepCopyInto(out *RabbitMQCustomConfi
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -4583,6 +4684,11 @@ func (in *RabbitMQOpsRequestSpec) DeepCopyInto(out *RabbitMQOpsRequestSpec) {
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -4590,7 +4696,7 @@ func (in *RabbitMQOpsRequestSpec) DeepCopyInto(out *RabbitMQOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -4685,7 +4791,7 @@ func (in *RedisCustomConfigurationSpec) DeepCopyInto(out *RedisCustomConfigurati
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -4829,6 +4935,11 @@ func (in *RedisOpsRequestSpec) DeepCopyInto(out *RedisOpsRequestSpec) {
 		*out = new(RedisTLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -4841,7 +4952,7 @@ func (in *RedisOpsRequestSpec) DeepCopyInto(out *RedisOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -4878,7 +4989,7 @@ func (in *RedisSentinelCustomConfigurationSpec) DeepCopyInto(out *RedisSentinelC
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -5012,6 +5123,11 @@ func (in *RedisSentinelOpsRequestSpec) DeepCopyInto(out *RedisSentinelOpsRequest
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -5019,7 +5135,7 @@ func (in *RedisSentinelOpsRequestSpec) DeepCopyInto(out *RedisSentinelOpsRequest
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -5297,7 +5413,7 @@ func (in *SinglestoreCustomConfiguration) DeepCopyInto(out *SinglestoreCustomCon
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -5477,9 +5593,14 @@ func (in *SinglestoreOpsRequestSpec) DeepCopyInto(out *SinglestoreOpsRequestSpec
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -5583,7 +5704,7 @@ func (in *SolrCustomConfigurationSpec) DeepCopyInto(out *SolrCustomConfiguration
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -5742,9 +5863,14 @@ func (in *SolrOpsRequestSpec) DeepCopyInto(out *SolrOpsRequestSpec) {
 		*out = new(TLSSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
@@ -5886,7 +6012,7 @@ func (in *ZooKeeperCustomConfigurationSpec) DeepCopyInto(out *ZooKeeperCustomCon
 	*out = *in
 	if in.ConfigSecret != nil {
 		in, out := &in.ConfigSecret, &out.ConfigSecret
-		*out = new(corev1.LocalObjectReference)
+		*out = new(v1.LocalObjectReference)
 		**out = **in
 	}
 	if in.ApplyConfig != nil {
@@ -6020,6 +6146,11 @@ func (in *ZooKeeperOpsRequestSpec) DeepCopyInto(out *ZooKeeperOpsRequestSpec) {
 		*out = new(ZooKeeperCustomConfigurationSpec)
 		(*in).DeepCopyInto(*out)
 	}
+	if in.Authentication != nil {
+		in, out := &in.Authentication, &out.Authentication
+		*out = new(AuthSpec)
+		(*in).DeepCopyInto(*out)
+	}
 	if in.Restart != nil {
 		in, out := &in.Restart, &out.Restart
 		*out = new(RestartSpec)
@@ -6027,7 +6158,7 @@ func (in *ZooKeeperOpsRequestSpec) DeepCopyInto(out *ZooKeeperOpsRequestSpec) {
 	}
 	if in.Timeout != nil {
 		in, out := &in.Timeout, &out.Timeout
-		*out = new(v1.Duration)
+		*out = new(metav1.Duration)
 		**out = **in
 	}
 	return
diff --git a/crds/kafka.kubedb.com_connectclusters.yaml b/crds/kafka.kubedb.com_connectclusters.yaml
index f466abe10..37b0e47a7 100644
--- a/crds/kafka.kubedb.com_connectclusters.yaml
+++ b/crds/kafka.kubedb.com_connectclusters.yaml
@@ -47,11 +47,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               configSecret:
@@ -108,11 +113,16 @@ spec:
                 type: object
               keystoreCredSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               monitor:
diff --git a/crds/kubedb.com_cassandras.yaml b/crds/kubedb.com_cassandras.yaml
index c8ec727e8..cc6a62aec 100644
--- a/crds/kubedb.com_cassandras.yaml
+++ b/crds/kubedb.com_cassandras.yaml
@@ -48,11 +48,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               configSecret:
diff --git a/crds/kubedb.com_clickhouses.yaml b/crds/kubedb.com_clickhouses.yaml
index d07e317a0..b1c10a853 100644
--- a/crds/kubedb.com_clickhouses.yaml
+++ b/crds/kubedb.com_clickhouses.yaml
@@ -48,11 +48,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               clusterTopology:
diff --git a/crds/kubedb.com_elasticsearches.yaml b/crds/kubedb.com_elasticsearches.yaml
index 1c182edce..fa3bd4686 100644
--- a/crds/kubedb.com_elasticsearches.yaml
+++ b/crds/kubedb.com_elasticsearches.yaml
@@ -50,11 +50,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -39677,11 +39682,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
diff --git a/crds/kubedb.com_etcds.yaml b/crds/kubedb.com_etcds.yaml
index 9a33935e8..1fe176699 100644
--- a/crds/kubedb.com_etcds.yaml
+++ b/crds/kubedb.com_etcds.yaml
@@ -50,11 +50,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               deletionPolicy:
diff --git a/crds/kubedb.com_ferretdbs.yaml b/crds/kubedb.com_ferretdbs.yaml
index d7535e177..f50434c0c 100644
--- a/crds/kubedb.com_ferretdbs.yaml
+++ b/crds/kubedb.com_ferretdbs.yaml
@@ -48,11 +48,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               backend:
diff --git a/crds/kubedb.com_kafkas.yaml b/crds/kubedb.com_kafkas.yaml
index 3d1b52d0e..e57b8634c 100644
--- a/crds/kubedb.com_kafkas.yaml
+++ b/crds/kubedb.com_kafkas.yaml
@@ -48,11 +48,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               configSecret:
@@ -73,11 +78,16 @@ spec:
                     type: object
                   configSecret:
                     properties:
+                      activeFrom:
+                        format: date-time
+                        type: string
                       externallyManaged:
                         type: boolean
                       name:
                         default: ""
                         type: string
+                      rotateAfter:
+                        type: string
                     type: object
                     x-kubernetes-map-type: atomic
                   podTemplate:
@@ -3217,11 +3227,16 @@ spec:
                 type: object
               keystoreCredSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               monitor:
@@ -13157,11 +13172,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               configSecret:
@@ -13182,11 +13202,16 @@ spec:
                     type: object
                   configSecret:
                     properties:
+                      activeFrom:
+                        format: date-time
+                        type: string
                       externallyManaged:
                         type: boolean
                       name:
                         default: ""
                         type: string
+                      rotateAfter:
+                        type: string
                     type: object
                     x-kubernetes-map-type: atomic
                   podTemplate:
@@ -16326,11 +16351,16 @@ spec:
                 type: object
               keystoreCredSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               monitor:
diff --git a/crds/kubedb.com_mariadbs.yaml b/crds/kubedb.com_mariadbs.yaml
index 7ae0220a9..01e7a6ec5 100644
--- a/crds/kubedb.com_mariadbs.yaml
+++ b/crds/kubedb.com_mariadbs.yaml
@@ -136,11 +136,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -4898,11 +4903,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
diff --git a/crds/kubedb.com_memcacheds.yaml b/crds/kubedb.com_memcacheds.yaml
index 7f19e5d92..48bded886 100644
--- a/crds/kubedb.com_memcacheds.yaml
+++ b/crds/kubedb.com_memcacheds.yaml
@@ -50,11 +50,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               configSecret:
diff --git a/crds/kubedb.com_mongodbs.yaml b/crds/kubedb.com_mongodbs.yaml
index 681aa6e4d..3bc04abc9 100644
--- a/crds/kubedb.com_mongodbs.yaml
+++ b/crds/kubedb.com_mongodbs.yaml
@@ -3211,11 +3211,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -23270,11 +23275,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
diff --git a/crds/kubedb.com_mssqlservers.yaml b/crds/kubedb.com_mssqlservers.yaml
index 79876c0ee..fc638e091 100644
--- a/crds/kubedb.com_mssqlservers.yaml
+++ b/crds/kubedb.com_mssqlservers.yaml
@@ -61,11 +61,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               configSecret:
diff --git a/crds/kubedb.com_mysqls.yaml b/crds/kubedb.com_mysqls.yaml
index 60825e52f..f78c3257c 100644
--- a/crds/kubedb.com_mysqls.yaml
+++ b/crds/kubedb.com_mysqls.yaml
@@ -206,11 +206,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -8181,11 +8186,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
diff --git a/crds/kubedb.com_perconaxtradbs.yaml b/crds/kubedb.com_perconaxtradbs.yaml
index 6d674da13..2af669de6 100644
--- a/crds/kubedb.com_perconaxtradbs.yaml
+++ b/crds/kubedb.com_perconaxtradbs.yaml
@@ -120,11 +120,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -4612,20 +4617,30 @@ spec:
                 properties:
                   monitorUserSecret:
                     properties:
+                      activeFrom:
+                        format: date-time
+                        type: string
                       externallyManaged:
                         type: boolean
                       name:
                         default: ""
                         type: string
+                      rotateAfter:
+                        type: string
                     type: object
                     x-kubernetes-map-type: atomic
                   replicationUserSecret:
                     properties:
+                      activeFrom:
+                        format: date-time
+                        type: string
                       externallyManaged:
                         type: boolean
                       name:
                         default: ""
                         type: string
+                      rotateAfter:
+                        type: string
                     type: object
                     x-kubernetes-map-type: atomic
                 type: object
@@ -4881,11 +4896,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -9042,20 +9062,30 @@ spec:
                 properties:
                   monitorUserSecret:
                     properties:
+                      activeFrom:
+                        format: date-time
+                        type: string
                       externallyManaged:
                         type: boolean
                       name:
                         default: ""
                         type: string
+                      rotateAfter:
+                        type: string
                     type: object
                     x-kubernetes-map-type: atomic
                   replicationUserSecret:
                     properties:
+                      activeFrom:
+                        format: date-time
+                        type: string
                       externallyManaged:
                         type: boolean
                       name:
                         default: ""
                         type: string
+                      rotateAfter:
+                        type: string
                     type: object
                     x-kubernetes-map-type: atomic
                 type: object
diff --git a/crds/kubedb.com_pgbouncers.yaml b/crds/kubedb.com_pgbouncers.yaml
index 7fa68f801..e9e8a9617 100644
--- a/crds/kubedb.com_pgbouncers.yaml
+++ b/crds/kubedb.com_pgbouncers.yaml
@@ -50,11 +50,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -3687,11 +3692,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
diff --git a/crds/kubedb.com_pgpools.yaml b/crds/kubedb.com_pgpools.yaml
index f0d6349b4..5c5a05727 100644
--- a/crds/kubedb.com_pgpools.yaml
+++ b/crds/kubedb.com_pgpools.yaml
@@ -48,11 +48,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               clientAuthMode:
diff --git a/crds/kubedb.com_postgreses.yaml b/crds/kubedb.com_postgreses.yaml
index 5af5a699d..47d475674 100644
--- a/crds/kubedb.com_postgreses.yaml
+++ b/crds/kubedb.com_postgreses.yaml
@@ -191,11 +191,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -5101,11 +5106,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
diff --git a/crds/kubedb.com_proxysqls.yaml b/crds/kubedb.com_proxysqls.yaml
index 9fe80bb97..ddb72dc44 100644
--- a/crds/kubedb.com_proxysqls.yaml
+++ b/crds/kubedb.com_proxysqls.yaml
@@ -50,11 +50,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -3677,11 +3682,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
diff --git a/crds/kubedb.com_rabbitmqs.yaml b/crds/kubedb.com_rabbitmqs.yaml
index 369687f7f..3071bd071 100644
--- a/crds/kubedb.com_rabbitmqs.yaml
+++ b/crds/kubedb.com_rabbitmqs.yaml
@@ -48,11 +48,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               configSecret:
diff --git a/crds/kubedb.com_redises.yaml b/crds/kubedb.com_redises.yaml
index 8a9b13a18..0ddf675e1 100644
--- a/crds/kubedb.com_redises.yaml
+++ b/crds/kubedb.com_redises.yaml
@@ -120,11 +120,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -4882,11 +4887,16 @@ spec:
                 type: object
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
diff --git a/crds/kubedb.com_redissentinels.yaml b/crds/kubedb.com_redissentinels.yaml
index eefb10d04..12268f8f9 100644
--- a/crds/kubedb.com_redissentinels.yaml
+++ b/crds/kubedb.com_redissentinels.yaml
@@ -45,11 +45,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
@@ -3702,11 +3707,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               autoOps:
diff --git a/crds/kubedb.com_singlestores.yaml b/crds/kubedb.com_singlestores.yaml
index 46f097975..59b0dd30f 100644
--- a/crds/kubedb.com_singlestores.yaml
+++ b/crds/kubedb.com_singlestores.yaml
@@ -48,11 +48,16 @@ spec:
             properties:
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               configSecret:
@@ -1100,11 +1105,16 @@ spec:
                 type: object
               licenseSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               monitor:
diff --git a/crds/kubedb.com_zookeepers.yaml b/crds/kubedb.com_zookeepers.yaml
index 633daecaf..5f6557a7b 100644
--- a/crds/kubedb.com_zookeepers.yaml
+++ b/crds/kubedb.com_zookeepers.yaml
@@ -52,11 +52,16 @@ spec:
                 type: integer
               authSecret:
                 properties:
+                  activeFrom:
+                    format: date-time
+                    type: string
                   externallyManaged:
                     type: boolean
                   name:
                     default: ""
                     type: string
+                  rotateAfter:
+                    type: string
                 type: object
                 x-kubernetes-map-type: atomic
               configSecret:
diff --git a/crds/ops.kubedb.com_clickhouseopsrequests.yaml b/crds/ops.kubedb.com_clickhouseopsrequests.yaml
index e56b50ac4..85e93944d 100644
--- a/crds/ops.kubedb.com_clickhouseopsrequests.yaml
+++ b/crds/ops.kubedb.com_clickhouseopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               databaseRef:
                 properties:
                   name:
@@ -62,6 +72,7 @@ spec:
               type:
                 enum:
                 - Restart
+                - RotateAuth
                 type: string
             required:
             - databaseRef
diff --git a/crds/ops.kubedb.com_druidopsrequests.yaml b/crds/ops.kubedb.com_druidopsrequests.yaml
index e76cea9f6..9668730ed 100644
--- a/crds/ops.kubedb.com_druidopsrequests.yaml
+++ b/crds/ops.kubedb.com_druidopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               databaseRef:
                 properties:
                   name:
@@ -64,6 +74,7 @@ spec:
                 - VerticalScaling
                 - VolumeExpansion
                 - Restart
+                - RotateAuth
                 type: string
               verticalScaling:
                 properties:
diff --git a/crds/ops.kubedb.com_elasticsearchopsrequests.yaml b/crds/ops.kubedb.com_elasticsearchopsrequests.yaml
index 3362d5ad9..397f39c0c 100644
--- a/crds/ops.kubedb.com_elasticsearchopsrequests.yaml
+++ b/crds/ops.kubedb.com_elasticsearchopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -241,6 +251,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_etcdopsrequests.yaml b/crds/ops.kubedb.com_etcdopsrequests.yaml
index bc3674330..f4570dfde 100644
--- a/crds/ops.kubedb.com_etcdopsrequests.yaml
+++ b/crds/ops.kubedb.com_etcdopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 type: object
               databaseRef:
@@ -175,6 +185,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_ferretdbopsrequests.yaml b/crds/ops.kubedb.com_ferretdbopsrequests.yaml
index 9700da76f..cdf4b979d 100644
--- a/crds/ops.kubedb.com_ferretdbopsrequests.yaml
+++ b/crds/ops.kubedb.com_ferretdbopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               databaseRef:
                 properties:
                   name:
@@ -191,6 +201,7 @@ spec:
                 - Restart
                 - HorizontalScaling
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_kafkaopsrequests.yaml b/crds/ops.kubedb.com_kafkaopsrequests.yaml
index 7e87bf6bd..0ce498abe 100644
--- a/crds/ops.kubedb.com_kafkaopsrequests.yaml
+++ b/crds/ops.kubedb.com_kafkaopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -204,6 +214,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_mariadbopsrequests.yaml b/crds/ops.kubedb.com_mariadbopsrequests.yaml
index 1e5fe988d..52f5c4974 100644
--- a/crds/ops.kubedb.com_mariadbopsrequests.yaml
+++ b/crds/ops.kubedb.com_mariadbopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -201,6 +211,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_memcachedopsrequests.yaml b/crds/ops.kubedb.com_memcachedopsrequests.yaml
index 05d12550a..7c1d7dff9 100644
--- a/crds/ops.kubedb.com_memcachedopsrequests.yaml
+++ b/crds/ops.kubedb.com_memcachedopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -196,6 +206,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_mongodbopsrequests.yaml b/crds/ops.kubedb.com_mongodbopsrequests.yaml
index 7ea91bca3..750ec73c2 100644
--- a/crds/ops.kubedb.com_mongodbopsrequests.yaml
+++ b/crds/ops.kubedb.com_mongodbopsrequests.yaml
@@ -68,6 +68,16 @@ spec:
                 - operation
                 - ref
                 type: object
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   arbiter:
@@ -357,6 +367,7 @@ spec:
                 - Reconfigure
                 - ReconfigureTLS
                 - Reprovision
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_mssqlserveropsrequests.yaml b/crds/ops.kubedb.com_mssqlserveropsrequests.yaml
index ab6b49290..00a0fa2f0 100644
--- a/crds/ops.kubedb.com_mssqlserveropsrequests.yaml
+++ b/crds/ops.kubedb.com_mssqlserveropsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -195,6 +205,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_mysqlopsrequests.yaml b/crds/ops.kubedb.com_mysqlopsrequests.yaml
index 7c60d23ce..e9a7207ca 100644
--- a/crds/ops.kubedb.com_mysqlopsrequests.yaml
+++ b/crds/ops.kubedb.com_mysqlopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -198,6 +208,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_perconaxtradbopsrequests.yaml b/crds/ops.kubedb.com_perconaxtradbopsrequests.yaml
index d2d78cec7..287931f46 100644
--- a/crds/ops.kubedb.com_perconaxtradbopsrequests.yaml
+++ b/crds/ops.kubedb.com_perconaxtradbopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -201,6 +211,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_pgbounceropsrequests.yaml b/crds/ops.kubedb.com_pgbounceropsrequests.yaml
index bca99d06e..d48f5bac6 100644
--- a/crds/ops.kubedb.com_pgbounceropsrequests.yaml
+++ b/crds/ops.kubedb.com_pgbounceropsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   pgbouncer:
@@ -197,6 +207,7 @@ spec:
                 - VerticalScaling
                 - UpdateVersion
                 - Reconfigure
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_pgpoolopsrequests.yaml b/crds/ops.kubedb.com_pgpoolopsrequests.yaml
index 66995b94b..300962f1c 100644
--- a/crds/ops.kubedb.com_pgpoolopsrequests.yaml
+++ b/crds/ops.kubedb.com_pgpoolopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -209,6 +219,7 @@ spec:
                 - Restart
                 - HorizontalScaling
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_postgresopsrequests.yaml b/crds/ops.kubedb.com_postgresopsrequests.yaml
index 6530c7814..b9a1ee909 100644
--- a/crds/ops.kubedb.com_postgresopsrequests.yaml
+++ b/crds/ops.kubedb.com_postgresopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -223,6 +233,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_proxysqlopsrequests.yaml b/crds/ops.kubedb.com_proxysqlopsrequests.yaml
index ad2d959bd..f59399bef 100644
--- a/crds/ops.kubedb.com_proxysqlopsrequests.yaml
+++ b/crds/ops.kubedb.com_proxysqlopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   adminVariables:
@@ -243,6 +253,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_rabbitmqopsrequests.yaml b/crds/ops.kubedb.com_rabbitmqopsrequests.yaml
index 041c5c0ef..fbaddc082 100644
--- a/crds/ops.kubedb.com_rabbitmqopsrequests.yaml
+++ b/crds/ops.kubedb.com_rabbitmqopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -195,6 +205,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_redisopsrequests.yaml b/crds/ops.kubedb.com_redisopsrequests.yaml
index 4e9f853e9..cc12d0fc8 100644
--- a/crds/ops.kubedb.com_redisopsrequests.yaml
+++ b/crds/ops.kubedb.com_redisopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -227,6 +237,7 @@ spec:
                 - Reconfigure
                 - ReconfigureTLS
                 - ReplaceSentinel
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_redissentinelopsrequests.yaml b/crds/ops.kubedb.com_redissentinelopsrequests.yaml
index 982a0aace..5a66ab075 100644
--- a/crds/ops.kubedb.com_redissentinelopsrequests.yaml
+++ b/crds/ops.kubedb.com_redissentinelopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -194,6 +204,7 @@ spec:
                 - Restart
                 - Reconfigure
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_singlestoreopsrequests.yaml b/crds/ops.kubedb.com_singlestoreopsrequests.yaml
index 224eff87e..aa3ec5827 100644
--- a/crds/ops.kubedb.com_singlestoreopsrequests.yaml
+++ b/crds/ops.kubedb.com_singlestoreopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   aggregator:
@@ -233,6 +243,7 @@ spec:
                 - Restart
                 - Configuration
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_solropsrequests.yaml b/crds/ops.kubedb.com_solropsrequests.yaml
index 605bb7ae8..932e048d2 100644
--- a/crds/ops.kubedb.com_solropsrequests.yaml
+++ b/crds/ops.kubedb.com_solropsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -204,6 +214,7 @@ spec:
                 - Reconfigure
                 - Restart
                 - ReconfigureTLS
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/crds/ops.kubedb.com_zookeeperopsrequests.yaml b/crds/ops.kubedb.com_zookeeperopsrequests.yaml
index c433492c0..b0d0ea471 100644
--- a/crds/ops.kubedb.com_zookeeperopsrequests.yaml
+++ b/crds/ops.kubedb.com_zookeeperopsrequests.yaml
@@ -48,6 +48,16 @@ spec:
                 - IfReady
                 - Always
                 type: string
+              authentication:
+                properties:
+                  secretRef:
+                    properties:
+                      name:
+                        default: ""
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
               configuration:
                 properties:
                   applyConfig:
@@ -89,6 +99,7 @@ spec:
                 - VolumeExpansion
                 - Restart
                 - Reconfigure
+                - RotateAuth
                 type: string
               updateVersion:
                 properties:
diff --git a/openapi/swagger.json b/openapi/swagger.json
index 3c0806b79..8235d187c 100644
--- a/openapi/swagger.json
+++ b/openapi/swagger.json
@@ -26105,6 +26105,10 @@
     "dev.kubedb.apimachinery.apis.kubedb.v1alpha2.SecretReference": {
       "type": "object",
       "properties": {
+        "activeFrom": {
+          "description": "ActiveFrom holds the RFC3339 time. The referred authSecret is in-use from this timestamp.",
+          "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+        },
         "externallyManaged": {
           "type": "boolean"
         },
@@ -26112,6 +26116,10 @@
           "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names",
           "type": "string",
           "default": ""
+        },
+        "rotateAfter": {
+          "description": "Recommendation engine will generate RotateAuth opsReq using this field",
+          "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
         }
       }
     },
@@ -26176,6 +26184,15 @@
         }
       }
     },
+    "dev.kubedb.apimachinery.apis.ops.v1alpha1.AuthSpec": {
+      "type": "object",
+      "properties": {
+        "secretRef": {
+          "description": "SecretRef holds the new authSecret If it is given, ops-manager will use this. Otherwise, will generate random password",
+          "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+        }
+      }
+    },
     "dev.kubedb.apimachinery.apis.ops.v1alpha1.ConfigNode": {
       "description": "ConfigNode is the spec for mongodb ConfigServer",
       "type": "object",
@@ -26372,6 +26389,10 @@
           "description": "ApplyOption is to control the execution of OpsRequest depending on the database state.",
           "type": "string"
         },
+        "authentication": {
+          "description": "Specifies information necessary for configuring authSecret of the database",
+          "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.AuthSpec"
+        },
         "configuration": {
           "description": "Specifies information necessary for custom configuration of Elasticsearch",
           "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.ElasticsearchCustomConfigurationSpec"
@@ -26609,6 +26630,10 @@
           "description": "ApplyOption is to control the execution of OpsRequest depending on the database state.",
           "type": "string"
         },
+        "authentication": {
+          "description": "Specifies information necessary for configuring authSecret of the database",
+          "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.AuthSpec"
+        },
         "configuration": {
           "description": "Specifies information necessary for custom configuration of Etcd",
           "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.EtcdCustomConfigurationSpec"
@@ -26793,6 +26818,10 @@
           "description": "ApplyOption is to control the execution of OpsRequest depending on the database state.",
           "type": "string"
         },
+        "authentication": {
+          "description": "Specifies information necessary for configuring authSecret of the database",
+          "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.AuthSpec"
+        },
         "configuration": {
           "description": "Specifies information necessary for custom configuration of Memcached",
           "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.MemcachedCustomConfigurationSpec"
@@ -27019,6 +27048,10 @@
           "description": "Specifies information necessary for setting up Archiver for database",
           "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.ArchiverOptions"
         },
+        "authentication": {
+          "description": "Specifies information necessary for configuring authSecret of the database",
+          "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.AuthSpec"
+        },
         "configuration": {
           "description": "Specifies information necessary for custom configuration of MongoDB",
           "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.MongoDBCustomConfigurationSpec"
@@ -27284,6 +27317,10 @@
           "description": "ApplyOption is to control the execution of OpsRequest depending on the database state.",
           "type": "string"
         },
+        "authentication": {
+          "description": "Specifies information necessary for configuring authSecret of the database",
+          "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.AuthSpec"
+        },
         "configuration": {
           "description": "Specifies information necessary for custom configuration of MySQL",
           "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.MySQLCustomConfigurationSpec"
@@ -27585,6 +27622,10 @@
           "description": "ApplyOption is to control the execution of OpsRequest depending on the database state.",
           "type": "string"
         },
+        "authentication": {
+          "description": "Specifies information necessary for configuring authSecret of the database",
+          "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.AuthSpec"
+        },
         "configuration": {
           "description": "Specifies information necessary for custom configuration of PerconaXtraDB",
           "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.PerconaXtraDBCustomConfigurationSpec"
@@ -27828,6 +27869,10 @@
           "description": "ApplyOption is to control the execution of OpsRequest depending on the database state.",
           "type": "string"
         },
+        "authentication": {
+          "description": "Specifies information necessary for configuring authSecret of the database",
+          "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.AuthSpec"
+        },
         "configuration": {
           "description": "Specifies information necessary for custom configuration of Postgres",
           "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.PostgresCustomConfigurationSpec"
@@ -28057,6 +28102,10 @@
           "description": "ApplyOption is to control the execution of OpsRequest depending on the database state.",
           "type": "string"
         },
+        "authentication": {
+          "description": "Specifies information necessary for configuring authSecret of the database",
+          "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.AuthSpec"
+        },
         "configuration": {
           "description": "Specifies information necessary for custom configuration of ProxySQL",
           "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.ProxySQLCustomConfigurationSpec"
@@ -28232,6 +28281,10 @@
           "description": "ApplyOption is to control the execution of OpsRequest depending on the database state.",
           "type": "string"
         },
+        "authentication": {
+          "description": "Specifies information necessary for configuring authSecret of the database",
+          "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.AuthSpec"
+        },
         "configuration": {
           "description": "Specifies information necessary for custom configuration of Redis",
           "$ref": "#/definitions/dev.kubedb.apimachinery.apis.ops.v1alpha1.RedisCustomConfigurationSpec"