diff --git a/apis/management.cattle.io/v3/authn_types.go b/apis/management.cattle.io/v3/authn_types.go
index ec0428cf..f56e813c 100644
--- a/apis/management.cattle.io/v3/authn_types.go
+++ b/apis/management.cattle.io/v3/authn_types.go
@@ -167,8 +167,8 @@ type GoogleOauthConfig struct {
 	metav1.ObjectMeta `json:"metadata,omitempty"`
 	AuthConfig        `json:",inline" mapstructure:",squash"`
 
-	OauthCredential          string `json:"oauthCredential,omitempty" norman:"required"`
-	ServiceAccountCredential string `json:"serviceAccountCredential,omitempty"`
+	OauthCredential          string `json:"oauthCredential,omitempty" norman:"required,type=password"`
+	ServiceAccountCredential string `json:"serviceAccountCredential,omitempty" norman:"type=password"`
 	AdminEmail               string `json:"adminEmail,omitempty"`
 	Hostname                 string `json:"hostname,omitempty" norman:"required"`
 	UserInfoEndpoint         string `json:"userInfoEndpoint" norman:"default=https://openidconnect.googleapis.com/v1/userinfo,required,notnullable"`