diff --git a/Chart.yaml b/Chart.yaml
index 843905f..3faa272 100644
--- a/Chart.yaml
+++ b/Chart.yaml
@@ -1,4 +1,4 @@
 apiVersion: v1
 name: pgdog
-version: v0.85
+version: v0.86
 appVersion: "v0.1.60"
diff --git a/README.md b/README.md
index 26a306f..0c1476c 100644
--- a/README.md
+++ b/README.md
@@ -100,6 +100,9 @@ users:
     password: "hunter2" # See ExternalSecrets for secure storage
 ```
 
+Set `authType` on a user to override the general `authType` setting. It accepts
+the same values and renders as `auth_type` in `users.toml`.
+
 **⚠️ For production**: Use ExternalSecrets instead of plain text
 passwords (see ExternalSecrets section below).
 
diff --git a/templates/secrets.yaml b/templates/secrets.yaml
index d71a6b6..f0dfa5e 100644
--- a/templates/secrets.yaml
+++ b/templates/secrets.yaml
@@ -3,6 +3,9 @@
 [[users]]
 name = {{ .name | quote }}
 database = {{ .database | quote }}
+{{- if hasKey . "authType" }}
+auth_type = {{ .authType | quote }}
+{{- end }}
 {{- if .identity }}
 identity = {{ .identity | quote }}
 {{- end }}
diff --git a/values.yaml b/values.yaml
index c4fde3c..d51636b 100644
--- a/values.yaml
+++ b/values.yaml
@@ -252,6 +252,7 @@ databases: []
 # Supports all arguments from users.toml. Arguments are named in
 # camelCase format.
 # Set identity on a user to match the identity in its client TLS certificate.
+# Set authType on a user to override the general authType setting.
 users: []
 
 # mirrors contains a list of databases to replicate traffic from/to.