diff --git a/apis/management.cattle.io/v3/zz_generated_deepcopy.go b/apis/management.cattle.io/v3/zz_generated_deepcopy.go
index 261a586d..0efebaed 100644
--- a/apis/management.cattle.io/v3/zz_generated_deepcopy.go
+++ b/apis/management.cattle.io/v3/zz_generated_deepcopy.go
@@ -4889,6 +4889,11 @@ func (in *RancherKubernetesEngineConfig) DeepCopyInto(out *RancherKubernetesEngi
 	in.CloudProvider.DeepCopyInto(&out.CloudProvider)
 	out.BastionHost = in.BastionHost
 	in.Monitoring.DeepCopyInto(&out.Monitoring)
+	if in.RotateCertificates != nil {
+		in, out := &in.RotateCertificates, &out.RotateCertificates
+		*out = new(RotateCertificates)
+		**out = **in
+	}
 	return
 }
 
@@ -5005,6 +5010,38 @@ func (in *RoleTemplateList) DeepCopyObject() runtime.Object {
 	return nil
 }
 
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *RotateCertificateOutput) DeepCopyInto(out *RotateCertificateOutput) {
+	*out = *in
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RotateCertificateOutput.
+func (in *RotateCertificateOutput) DeepCopy() *RotateCertificateOutput {
+	if in == nil {
+		return nil
+	}
+	out := new(RotateCertificateOutput)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *RotateCertificates) DeepCopyInto(out *RotateCertificates) {
+	*out = *in
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RotateCertificates.
+func (in *RotateCertificates) DeepCopy() *RotateCertificates {
+	if in == nil {
+		return nil
+	}
+	out := new(RotateCertificates)
+	in.DeepCopyInto(out)
+	return out
+}
+
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
 func (in *RouteOpenstackOpts) DeepCopyInto(out *RouteOpenstackOpts) {
 	*out = *in
diff --git a/client/management/v3/zz_generated_cluster.go b/client/management/v3/zz_generated_cluster.go
index 827b6f95..46fb8c12 100644
--- a/client/management/v3/zz_generated_cluster.go
+++ b/client/management/v3/zz_generated_cluster.go
@@ -111,6 +111,8 @@ type ClusterOperations interface {
 	ActionGenerateKubeconfig(resource *Cluster) (*GenerateKubeConfigOutput, error)
 
 	ActionImportYaml(resource *Cluster, input *ImportClusterYamlInput) (*ImportYamlOutput, error)
+
+	ActionRotateCertificates(resource *Cluster) (*RotateCertificateOutput, error)
 }
 
 func newClusterClient(apiClient *Client) *ClusterClient {
@@ -181,3 +183,9 @@ func (c *ClusterClient) ActionImportYaml(resource *Cluster, input *ImportCluster
 	err := c.apiClient.Ops.DoAction(ClusterType, "importYaml", &resource.Resource, input, resp)
 	return resp, err
 }
+
+func (c *ClusterClient) ActionRotateCertificates(resource *Cluster) (*RotateCertificateOutput, error) {
+	resp := &RotateCertificateOutput{}
+	err := c.apiClient.Ops.DoAction(ClusterType, "rotateCertificates", &resource.Resource, nil, resp)
+	return resp, err
+}
diff --git a/client/management/v3/zz_generated_rancher_kubernetes_engine_config.go b/client/management/v3/zz_generated_rancher_kubernetes_engine_config.go
index ff728ddb..6ff89a85 100644
--- a/client/management/v3/zz_generated_rancher_kubernetes_engine_config.go
+++ b/client/management/v3/zz_generated_rancher_kubernetes_engine_config.go
@@ -17,6 +17,7 @@ const (
 	RancherKubernetesEngineConfigFieldNodes               = "nodes"
 	RancherKubernetesEngineConfigFieldPrefixPath          = "prefixPath"
 	RancherKubernetesEngineConfigFieldPrivateRegistries   = "privateRegistries"
+	RancherKubernetesEngineConfigFieldRotateCertificates  = "rotateCertificates"
 	RancherKubernetesEngineConfigFieldSSHAgentAuth        = "sshAgentAuth"
 	RancherKubernetesEngineConfigFieldSSHKeyPath          = "sshKeyPath"
 	RancherKubernetesEngineConfigFieldServices            = "services"
@@ -24,23 +25,24 @@ const (
 )
 
 type RancherKubernetesEngineConfig struct {
-	AddonJobTimeout     int64              `json:"addonJobTimeout,omitempty" yaml:"addonJobTimeout,omitempty"`
-	Addons              string             `json:"addons,omitempty" yaml:"addons,omitempty"`
-	AddonsInclude       []string           `json:"addonsInclude,omitempty" yaml:"addonsInclude,omitempty"`
-	Authentication      *AuthnConfig       `json:"authentication,omitempty" yaml:"authentication,omitempty"`
-	Authorization       *AuthzConfig       `json:"authorization,omitempty" yaml:"authorization,omitempty"`
-	BastionHost         *BastionHost       `json:"bastionHost,omitempty" yaml:"bastionHost,omitempty"`
-	CloudProvider       *CloudProvider     `json:"cloudProvider,omitempty" yaml:"cloudProvider,omitempty"`
-	ClusterName         string             `json:"clusterName,omitempty" yaml:"clusterName,omitempty"`
-	IgnoreDockerVersion bool               `json:"ignoreDockerVersion,omitempty" yaml:"ignoreDockerVersion,omitempty"`
-	Ingress             *IngressConfig     `json:"ingress,omitempty" yaml:"ingress,omitempty"`
-	Monitoring          *MonitoringConfig  `json:"monitoring,omitempty" yaml:"monitoring,omitempty"`
-	Network             *NetworkConfig     `json:"network,omitempty" yaml:"network,omitempty"`
-	Nodes               []RKEConfigNode    `json:"nodes,omitempty" yaml:"nodes,omitempty"`
-	PrefixPath          string             `json:"prefixPath,omitempty" yaml:"prefixPath,omitempty"`
-	PrivateRegistries   []PrivateRegistry  `json:"privateRegistries,omitempty" yaml:"privateRegistries,omitempty"`
-	SSHAgentAuth        bool               `json:"sshAgentAuth,omitempty" yaml:"sshAgentAuth,omitempty"`
-	SSHKeyPath          string             `json:"sshKeyPath,omitempty" yaml:"sshKeyPath,omitempty"`
-	Services            *RKEConfigServices `json:"services,omitempty" yaml:"services,omitempty"`
-	Version             string             `json:"kubernetesVersion,omitempty" yaml:"kubernetesVersion,omitempty"`
+	AddonJobTimeout     int64               `json:"addonJobTimeout,omitempty" yaml:"addonJobTimeout,omitempty"`
+	Addons              string              `json:"addons,omitempty" yaml:"addons,omitempty"`
+	AddonsInclude       []string            `json:"addonsInclude,omitempty" yaml:"addonsInclude,omitempty"`
+	Authentication      *AuthnConfig        `json:"authentication,omitempty" yaml:"authentication,omitempty"`
+	Authorization       *AuthzConfig        `json:"authorization,omitempty" yaml:"authorization,omitempty"`
+	BastionHost         *BastionHost        `json:"bastionHost,omitempty" yaml:"bastionHost,omitempty"`
+	CloudProvider       *CloudProvider      `json:"cloudProvider,omitempty" yaml:"cloudProvider,omitempty"`
+	ClusterName         string              `json:"clusterName,omitempty" yaml:"clusterName,omitempty"`
+	IgnoreDockerVersion bool                `json:"ignoreDockerVersion,omitempty" yaml:"ignoreDockerVersion,omitempty"`
+	Ingress             *IngressConfig      `json:"ingress,omitempty" yaml:"ingress,omitempty"`
+	Monitoring          *MonitoringConfig   `json:"monitoring,omitempty" yaml:"monitoring,omitempty"`
+	Network             *NetworkConfig      `json:"network,omitempty" yaml:"network,omitempty"`
+	Nodes               []RKEConfigNode     `json:"nodes,omitempty" yaml:"nodes,omitempty"`
+	PrefixPath          string              `json:"prefixPath,omitempty" yaml:"prefixPath,omitempty"`
+	PrivateRegistries   []PrivateRegistry   `json:"privateRegistries,omitempty" yaml:"privateRegistries,omitempty"`
+	RotateCertificates  *RotateCertificates `json:"rotateCertificates,omitempty" yaml:"rotateCertificates,omitempty"`
+	SSHAgentAuth        bool                `json:"sshAgentAuth,omitempty" yaml:"sshAgentAuth,omitempty"`
+	SSHKeyPath          string              `json:"sshKeyPath,omitempty" yaml:"sshKeyPath,omitempty"`
+	Services            *RKEConfigServices  `json:"services,omitempty" yaml:"services,omitempty"`
+	Version             string              `json:"kubernetesVersion,omitempty" yaml:"kubernetesVersion,omitempty"`
 }
diff --git a/client/management/v3/zz_generated_rotate_certificate_output.go b/client/management/v3/zz_generated_rotate_certificate_output.go
new file mode 100644
index 00000000..47c50ec8
--- /dev/null
+++ b/client/management/v3/zz_generated_rotate_certificate_output.go
@@ -0,0 +1,10 @@
+package client
+
+const (
+	RotateCertificateOutputType         = "rotateCertificateOutput"
+	RotateCertificateOutputFieldMessage = "message"
+)
+
+type RotateCertificateOutput struct {
+	Message string `json:"message,omitempty" yaml:"message,omitempty"`
+}
diff --git a/client/management/v3/zz_generated_rotate_certificates.go b/client/management/v3/zz_generated_rotate_certificates.go
new file mode 100644
index 00000000..b2ca8e06
--- /dev/null
+++ b/client/management/v3/zz_generated_rotate_certificates.go
@@ -0,0 +1,8 @@
+package client
+
+const (
+	RotateCertificatesType = "rotateCertificates"
+)
+
+type RotateCertificates struct {
+}