diff --git a/pkg/apis/cpo.opensource.cybertec.at/v1/zz_generated.deepcopy.go b/pkg/apis/cpo.opensource.cybertec.at/v1/zz_generated.deepcopy.go
index 8d5b34be0..9daa74e86 100644
--- a/pkg/apis/cpo.opensource.cybertec.at/v1/zz_generated.deepcopy.go
+++ b/pkg/apis/cpo.opensource.cybertec.at/v1/zz_generated.deepcopy.go
@@ -2,7 +2,7 @@
 // +build !ignore_autogenerated
 
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/cluster/cluster.go b/pkg/cluster/cluster.go
index 615df9d69..f97611a1d 100644
--- a/pkg/cluster/cluster.go
+++ b/pkg/cluster/cluster.go
@@ -127,16 +127,7 @@ func New(cfg Config, kubeClient k8sutil.KubernetesClient, pgSpec cpov1.Postgresq
 	if !ok {
 		passwordEncryption = "scram-sha-256"
 	}
-	if pgSpec.Spec.Monitoring != nil {
-		flg := cpov1.UserFlags{constants.RoleFlagLogin}
-		if pgSpec.Spec.Users != nil {
-			pgSpec.Spec.Users[monitorUsername] = flg
-		} else {
-			users := make(map[string]cpov1.UserFlags)
-			pgSpec.Spec.Users = users
-			pgSpec.Spec.Users[monitorUsername] = flg
-		}
-	}
+
 	cluster := &Cluster{
 		Config:         cfg,
 		Postgresql:     pgSpec,
@@ -359,12 +350,6 @@ func (c *Cluster) Create() (err error) {
 		}
 		c.logger.Info("a TDE secret was successfully created")
 	}
-	if c.Postgresql.Spec.Monitoring != nil {
-		if err := c.createMonitoringSecret(); err != nil {
-			return fmt.Errorf("could not create the monitoring secret: %v", err)
-		}
-		c.logger.Info("a monitoring secret was successfully created")
-	}
 
 	if specHasPgbackrestClone(&c.Postgresql.Spec) {
 		if err := c.createPgbackrestCloneConfig(); err != nil {
@@ -440,27 +425,8 @@ func (c *Cluster) Create() (err error) {
 	// something fails, report warning
 	c.createConnectionPooler(c.installLookupFunction)
 
-	//Setup cpo monitoring related sql statements
 	if c.Spec.Monitoring != nil {
-		c.logger.Info("setting up CPO monitoring")
-
-		// Open a new connection to the postgres db tp setup monitoring struc and permissions
-		if err := c.initDbConnWithName("postgres"); err != nil {
-			return fmt.Errorf("could not init database connection")
-		}
-		defer func() {
-			if c.connectionIsClosed() {
-				return
-			}
-
-			if err := c.closeDbConn(); err != nil {
-				c.logger.Errorf("could not close database connection: %v", err)
-			}
-		}()
-		_, err := c.pgDb.Exec(CPOmonitoring)
-		if err != nil {
-			return fmt.Errorf("CPO monitoring could not be setup: %v", err)
-		}
+		c.addMonitoringPermissions()
 	}
 
 	// remember slots to detect deletion from manifest
@@ -961,22 +927,10 @@ func (c *Cluster) Update(oldSpec, newSpec *cpov1.Postgresql) error {
 			updateFailed = true
 		}
 	}
-	//Add monitoring user if required
-	if newSpec.Spec.Monitoring != nil {
-		flags := []string{constants.RoleFlagLogin}
-		monitorUser := map[string]spec.PgUser{
-			monitorUsername: {
-				Origin:    spec.RoleOriginInfrastructure,
-				Name:      monitorUsername,
-				Namespace: c.Namespace,
-				Flags:     flags,
-			},
-		}
-		c.pgUsers[monitorUsername] = monitorUser[monitorUsername]
-	}
 	//Check if monitoring user is added in manifest
 	if _, ok := newSpec.Spec.Users["cpo-exporter"]; ok {
 		c.logger.Error("creating user of name cpo-exporter is not allowed as it is reserved for monitoring")
+		updateFailed = true
 	}
 
 	// Users
@@ -990,11 +944,14 @@ func (c *Cluster) Update(oldSpec, newSpec *cpov1.Postgresql) error {
 		// only when disabled in oldSpec and enabled in newSpec
 		needPoolerUser := c.needConnectionPoolerUser(&oldSpec.Spec, &newSpec.Spec)
 
+		// Check if Monitor-User needs to be created
+		needMonitoring := newSpec.Spec.Monitoring != nil && oldSpec.Spec.Monitoring == nil
+
 		// streams new replication user created who is initialized in initUsers
 		// only when streams were not specified in oldSpec but in newSpec
 		needStreamUser := len(oldSpec.Spec.Streams) == 0 && len(newSpec.Spec.Streams) > 0
 
-		if !sameUsers || !sameRotatedUsers || needPoolerUser || needStreamUser {
+		if !sameUsers || !sameRotatedUsers || needPoolerUser || needMonitoring || needStreamUser {
 			c.logger.Debugf("initialize users")
 			if err := c.initUsers(); err != nil {
 				c.logger.Errorf("could not init users - skipping sync of secrets and databases: %v", err)
@@ -1024,12 +981,6 @@ func (c *Cluster) Update(oldSpec, newSpec *cpov1.Postgresql) error {
 		syncStatefulSet = true
 	}
 
-	//sync monitoring container
-	if !reflect.DeepEqual(oldSpec.Spec.Monitoring, newSpec.Spec.Monitoring) {
-		syncStatefulSet = true
-		c.syncMonitoringSecret(oldSpec, newSpec)
-	}
-
 	//sync sts when there is a change in the pgbackrest secret, since we need to mount this
 	if newSpec.Spec.Backup != nil && oldSpec.Spec.Backup != nil &&
 		newSpec.Spec.Backup.Pgbackrest != nil && oldSpec.Spec.Backup.Pgbackrest != nil &&
@@ -1213,6 +1164,17 @@ func (c *Cluster) Update(oldSpec, newSpec *cpov1.Postgresql) error {
 		updateFailed = true
 	}
 
+	// Check if we need to call addMonitoringPermissions-func
+	if c.Spec.Monitoring != nil && newSpec.Spec.Monitoring != nil && oldSpec.Spec.Monitoring == nil {
+		c.addMonitoringPermissions()
+	}
+	// Check if Monitoring-Secret needs to be removed
+	if newSpec.Spec.Monitoring == nil && oldSpec.Spec.Monitoring != nil {
+		if err := c.deleteMonitoringSecret(); err != nil {
+			return fmt.Errorf("could not remove the Monitoring secret: %v", err)
+		}
+	}
+
 	// streams
 	if len(newSpec.Spec.Streams) > 0 {
 		if err := c.syncStreams(); err != nil {
@@ -1460,6 +1422,22 @@ func (c *Cluster) initSystemUsers() error {
 		}
 	}
 
+	// if the monitor object has been created, a monitoring user is required.
+	if c.Spec.Monitoring != nil {
+
+		MonitoringUser := spec.PgUser{
+			Origin:    spec.RoleMonitoring,
+			Name:      constants.MonitoringUserKeyName,
+			Namespace: c.Namespace,
+			Flags:     []string{constants.RoleFlagLogin},
+			Password:  util.RandomPassword(constants.PasswordLength),
+		}
+
+		if _, exists := c.systemUsers[constants.MonitoringUserKeyName]; !exists {
+			c.systemUsers[constants.MonitoringUserKeyName] = MonitoringUser
+		}
+	}
+
 	// replication users for event streams are another exception
 	// the operator will create one replication user for all streams
 	if len(c.Spec.Streams) > 0 {
diff --git a/pkg/cluster/cluster_test.go b/pkg/cluster/cluster_test.go
index afcbd393d..1f5f74c41 100644
--- a/pkg/cluster/cluster_test.go
+++ b/pkg/cluster/cluster_test.go
@@ -7,8 +7,6 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/sirupsen/logrus"
-	"github.com/stretchr/testify/assert"
 	cpov1 "github.com/cybertec-postgresql/cybertec-pg-operator/pkg/apis/cpo.opensource.cybertec.at/v1"
 	fakecpov1 "github.com/cybertec-postgresql/cybertec-pg-operator/pkg/generated/clientset/versioned/fake"
 	"github.com/cybertec-postgresql/cybertec-pg-operator/pkg/spec"
@@ -17,6 +15,8 @@ import (
 	"github.com/cybertec-postgresql/cybertec-pg-operator/pkg/util/constants"
 	"github.com/cybertec-postgresql/cybertec-pg-operator/pkg/util/k8sutil"
 	"github.com/cybertec-postgresql/cybertec-pg-operator/pkg/util/teams"
+	"github.com/sirupsen/logrus"
+	"github.com/stretchr/testify/assert"
 	v1 "k8s.io/api/core/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/client-go/kubernetes/fake"
@@ -944,16 +944,20 @@ func TestServiceAnnotations(t *testing.T) {
 }
 
 func TestInitSystemUsers(t *testing.T) {
-	// reset system users, pooler and stream section
+	// reset system users, pooler, monitoring and stream section
 	cl.systemUsers = make(map[string]spec.PgUser)
 	cl.Spec.EnableConnectionPooler = boolToPointer(false)
+	cl.Spec.Monitoring = nil
 	cl.Spec.Streams = []cpov1.Stream{}
 
-	// default cluster without connection pooler and event streams
+	// default cluster without connection pooler, monitoring and event streams
 	cl.initSystemUsers()
 	if _, exist := cl.systemUsers[constants.ConnectionPoolerUserKeyName]; exist {
 		t.Errorf("%s, connection pooler user is present", t.Name())
 	}
+	if _, exist := cl.systemUsers[constants.MonitoringUserKeyName]; exist {
+		t.Errorf("%s, Monitoring user is present", t.Name())
+	}
 	if _, exist := cl.systemUsers[constants.EventStreamUserKeyName]; exist {
 		t.Errorf("%s, stream user is present", t.Name())
 	}
diff --git a/pkg/cluster/database.go b/pkg/cluster/database.go
index 21fd23c60..36c681755 100644
--- a/pkg/cluster/database.go
+++ b/pkg/cluster/database.go
@@ -89,7 +89,8 @@ const (
 			TO {{.pooler_user}};
 		GRANT USAGE ON SCHEMA {{.pooler_schema}} TO {{.pooler_user}};
 	`
-	CPOmonitoring = `
+
+	cpoMonitoring = `
 		GRANT pg_monitor TO cpo_exporter;
 		GRANT SELECT ON TABLE pg_authid TO cpo_exporter;
 
@@ -793,3 +794,27 @@ func (c *Cluster) installLookupFunction(poolerSchema, poolerUser string) error {
 
 	return nil
 }
+
+// Creates the needes structure and grant needed permissions for the Monitoring
+func (c *Cluster) addMonitoringPermissions() error {
+	c.logger.Info("setting up CPO monitoring")
+
+	// Open a new connection to the postgres db tp setup monitoring struc and permissions
+	if err := c.initDbConnWithName("postgres"); err != nil {
+		return fmt.Errorf("could not init database connection")
+	}
+	defer func() {
+		if c.connectionIsClosed() {
+			return
+		}
+
+		if err := c.closeDbConn(); err != nil {
+			c.logger.Errorf("could not close database connection: %v", err)
+		}
+	}()
+	_, err := c.pgDb.Exec(cpoMonitoring)
+	if err != nil {
+		return fmt.Errorf("CPO monitoring could not be setup: %v", err)
+	}
+	return nil
+}
diff --git a/pkg/cluster/resources.go b/pkg/cluster/resources.go
index b40e35daa..9a3361217 100644
--- a/pkg/cluster/resources.go
+++ b/pkg/cluster/resources.go
@@ -15,7 +15,6 @@ import (
 
 	cpov1 "github.com/cybertec-postgresql/cybertec-pg-operator/pkg/apis/cpo.opensource.cybertec.at/v1"
 	"github.com/cybertec-postgresql/cybertec-pg-operator/pkg/util"
-	"github.com/cybertec-postgresql/cybertec-pg-operator/pkg/util/constants"
 	"github.com/cybertec-postgresql/cybertec-pg-operator/pkg/util/k8sutil"
 	"github.com/cybertec-postgresql/cybertec-pg-operator/pkg/util/retryutil"
 )
@@ -95,16 +94,6 @@ func (c *Cluster) createStatefulSet() (*appsv1.StatefulSet, error) {
 			Env: c.generateMonitoringEnvVars(),
 		}
 		c.Spec.Sidecars = append(c.Spec.Sidecars, *sidecar) //populate the sidecar spec so that the sidecar is automatically created
-
-		//Add monitoring user
-		flg := cpov1.UserFlags{constants.RoleFlagLogin}
-		if c.Spec.Users != nil {
-			c.Spec.Users[monitorUsername] = flg
-		} else {
-			users := make(map[string]cpov1.UserFlags)
-			c.Spec.Users = users
-			c.Spec.Users[monitorUsername] = flg
-		}
 	}
 
 	statefulSetSpec, err := c.generateStatefulSet(&c.Spec)
diff --git a/pkg/cluster/sync.go b/pkg/cluster/sync.go
index 084accfbc..a12117d97 100644
--- a/pkg/cluster/sync.go
+++ b/pkg/cluster/sync.go
@@ -192,11 +192,6 @@ func (c *Cluster) Sync(newSpec *cpov1.Postgresql) error {
 		return fmt.Errorf("error refreshing restore configmap: %v", err)
 	}
 
-	// sync monitoring
-	if err = c.syncMonitoringSecret(&oldSpec, newSpec); err != nil {
-		return fmt.Errorf("could not sync monitoring: %v", err)
-	}
-
 	if err = c.initUsers(); err != nil {
 		err = fmt.Errorf("could not init users: %v", err)
 		return err
@@ -1032,6 +1027,13 @@ func (c *Cluster) updateSecret(
 			userMap = c.systemUsers
 		}
 	}
+	// use system user when Monitoring is enabled and Monitoring user is specfied in manifest
+	if _, exists := c.systemUsers[constants.MonitoringUserKeyName]; exists {
+		if secretUsername == c.systemUsers[constants.MonitoringUserKeyName].Name {
+			userKey = constants.MonitoringUserKeyName
+			userMap = c.systemUsers
+		}
+	}
 	// use system user when streams are defined and fes_user is specfied in manifest
 	if _, exists := c.systemUsers[constants.EventStreamUserKeyName]; exists {
 		if secretUsername == c.systemUsers[constants.EventStreamUserKeyName].Name {
@@ -1682,37 +1684,6 @@ func (c *Cluster) createTDESecret() error {
 	return nil
 }
 
-func (c *Cluster) createMonitoringSecret() error {
-	c.logger.Info("creating Monitoring secret")
-	c.setProcessName("creating Monitoring secret")
-	generatedKey := make([]byte, 16)
-	rand.Read(generatedKey)
-
-	generatedSecret := v1.Secret{
-		ObjectMeta: metav1.ObjectMeta{
-			Name:      c.getMonitoringSecretName(),
-			Namespace: c.Namespace,
-			Labels:    c.labelsSet(true),
-		},
-		Type: v1.SecretTypeOpaque,
-		Data: map[string][]byte{
-			"username": []byte(monitorUsername),
-			"password": []byte(fmt.Sprintf("%x", generatedKey)),
-		},
-	}
-	secret, err := c.KubeClient.Secrets(generatedSecret.Namespace).Create(context.TODO(), &generatedSecret, metav1.CreateOptions{})
-	if err == nil {
-		c.Secrets[secret.UID] = secret
-		c.logger.Debugf("created new secret %s, namespace: %s, uid: %s", util.NameFromMeta(secret.ObjectMeta), generatedSecret.Namespace, secret.UID)
-	} else {
-		if !k8sutil.ResourceAlreadyExists(err) {
-			return fmt.Errorf("could not create secret for Monitoring %s: in namespace %s: %v", util.NameFromMeta(secret.ObjectMeta), generatedSecret.Namespace, err)
-		}
-	}
-
-	return nil
-}
-
 // delete monitoring secret
 func (c *Cluster) deleteMonitoringSecret() (err error) {
 	// Repeat the same for the secret object
@@ -1732,47 +1703,6 @@ func (c *Cluster) deleteMonitoringSecret() (err error) {
 	return nil
 }
 
-// Sync monitoring
-// In case of monitoring is added/deleted, we need to
-// 1. Update sts to in/exclude the exporter contianer
-// 2. Add/Delete the respective user
-// 3. Add/Delete the respective secret
-func (c *Cluster) syncMonitoringSecret(oldSpec, newSpec *cpov1.Postgresql) error {
-	c.logger.Info("syncing Monitoring secret")
-	c.setProcessName("syncing Monitoring secret")
-
-	if newSpec.Spec.Monitoring != nil && oldSpec.Spec.Monitoring == nil {
-		// Create monitoring secret
-		if err := c.createMonitoringSecret(); err != nil {
-			return fmt.Errorf("could not create the monitoring secret: %v", err)
-		} else {
-			flags := []string{constants.RoleFlagLogin}
-			monitorUser := map[string]spec.PgUser{
-				monitorUsername: {
-					Origin:    spec.RoleOriginInfrastructure,
-					Name:      monitorUsername,
-					Namespace: c.Namespace,
-					Flags:     flags,
-				},
-			}
-			c.pgUsers[monitorUsername] = monitorUser[monitorUsername]
-		}
-		c.logger.Info("monitoring secret was successfully created")
-	} else if newSpec.Spec.Monitoring == nil && oldSpec.Spec.Monitoring != nil {
-		// Delete the monitoring secret
-		if err := c.deleteMonitoringSecret(); err != nil {
-			return fmt.Errorf("could not delete the monitoring secret: %v", err)
-		} else {
-			// Delete the monitoring user
-			monitorUser := c.pgUsers[monitorUsername]
-			monitorUser.Deleted = true
-			c.pgUsers[monitorUsername] = monitorUser
-		}
-		c.logger.Info("monitoring secret was successfully deleted")
-	}
-	return nil
-}
-
 func generateRootCertificate(
 	privateKey *ecdsa.PrivateKey, serialNumber *big.Int,
 ) (*x509.Certificate, error) {
diff --git a/pkg/generated/clientset/versioned/clientset.go b/pkg/generated/clientset/versioned/clientset.go
index f7c645ed9..968093781 100644
--- a/pkg/generated/clientset/versioned/clientset.go
+++ b/pkg/generated/clientset/versioned/clientset.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/doc.go b/pkg/generated/clientset/versioned/doc.go
index 4c3683194..34b48f910 100644
--- a/pkg/generated/clientset/versioned/doc.go
+++ b/pkg/generated/clientset/versioned/doc.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/fake/clientset_generated.go b/pkg/generated/clientset/versioned/fake/clientset_generated.go
index 53fdbcbf3..8849f8335 100644
--- a/pkg/generated/clientset/versioned/fake/clientset_generated.go
+++ b/pkg/generated/clientset/versioned/fake/clientset_generated.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/fake/doc.go b/pkg/generated/clientset/versioned/fake/doc.go
index 78f1ed834..7548400fa 100644
--- a/pkg/generated/clientset/versioned/fake/doc.go
+++ b/pkg/generated/clientset/versioned/fake/doc.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/fake/register.go b/pkg/generated/clientset/versioned/fake/register.go
index 9ac0f6655..0fe8db883 100644
--- a/pkg/generated/clientset/versioned/fake/register.go
+++ b/pkg/generated/clientset/versioned/fake/register.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/scheme/doc.go b/pkg/generated/clientset/versioned/scheme/doc.go
index 1aa580cc1..1f79f0496 100644
--- a/pkg/generated/clientset/versioned/scheme/doc.go
+++ b/pkg/generated/clientset/versioned/scheme/doc.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/scheme/register.go b/pkg/generated/clientset/versioned/scheme/register.go
index 99ebde680..f6e96ac83 100644
--- a/pkg/generated/clientset/versioned/scheme/register.go
+++ b/pkg/generated/clientset/versioned/scheme/register.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/cpo.opensource.cybertec.at_client.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/cpo.opensource.cybertec.at_client.go
index 1c4401eec..8d1b5ed76 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/cpo.opensource.cybertec.at_client.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/cpo.opensource.cybertec.at_client.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/doc.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/doc.go
index 34e16f7ad..5c6f06565 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/doc.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/doc.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/doc.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/doc.go
index a5ceefe98..63b4b5b8f 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/doc.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/doc.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_cpo.opensource.cybertec.at_client.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_cpo.opensource.cybertec.at_client.go
index 3c4fccda3..c0fb5138f 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_cpo.opensource.cybertec.at_client.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_cpo.opensource.cybertec.at_client.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_operatorconfiguration.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_operatorconfiguration.go
index 00e5cfcd0..b26cab5e4 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_operatorconfiguration.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_operatorconfiguration.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_postgresql.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_postgresql.go
index 8b0ded47c..c7768f827 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_postgresql.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_postgresql.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_postgresteam.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_postgresteam.go
index e076f587f..53f02592d 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_postgresteam.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/fake/fake_postgresteam.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/generated_expansion.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/generated_expansion.go
index ba0d6503a..8a5e126d7 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/generated_expansion.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/generated_expansion.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/operatorconfiguration.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/operatorconfiguration.go
index a825221bc..c594c76a1 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/operatorconfiguration.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/operatorconfiguration.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/postgresql.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/postgresql.go
index bb13bf7f3..b1b23e627 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/postgresql.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/postgresql.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/postgresteam.go b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/postgresteam.go
index b0c0c0ba4..97336ef60 100644
--- a/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/postgresteam.go
+++ b/pkg/generated/clientset/versioned/typed/cpo.opensource.cybertec.at/v1/postgresteam.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/zalando.org/v1/doc.go b/pkg/generated/clientset/versioned/typed/zalando.org/v1/doc.go
index 34e16f7ad..5c6f06565 100644
--- a/pkg/generated/clientset/versioned/typed/zalando.org/v1/doc.go
+++ b/pkg/generated/clientset/versioned/typed/zalando.org/v1/doc.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/zalando.org/v1/fabriceventstream.go b/pkg/generated/clientset/versioned/typed/zalando.org/v1/fabriceventstream.go
index df925d241..1005b846d 100644
--- a/pkg/generated/clientset/versioned/typed/zalando.org/v1/fabriceventstream.go
+++ b/pkg/generated/clientset/versioned/typed/zalando.org/v1/fabriceventstream.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/doc.go b/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/doc.go
index a5ceefe98..63b4b5b8f 100644
--- a/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/doc.go
+++ b/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/doc.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/fake_fabriceventstream.go b/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/fake_fabriceventstream.go
index fe32cfd20..1b6d5b823 100644
--- a/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/fake_fabriceventstream.go
+++ b/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/fake_fabriceventstream.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/fake_zalando.org_client.go b/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/fake_zalando.org_client.go
index 09daf52b2..93aee67cd 100644
--- a/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/fake_zalando.org_client.go
+++ b/pkg/generated/clientset/versioned/typed/zalando.org/v1/fake/fake_zalando.org_client.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/zalando.org/v1/generated_expansion.go b/pkg/generated/clientset/versioned/typed/zalando.org/v1/generated_expansion.go
index 8d52d5161..4d1d3e37e 100644
--- a/pkg/generated/clientset/versioned/typed/zalando.org/v1/generated_expansion.go
+++ b/pkg/generated/clientset/versioned/typed/zalando.org/v1/generated_expansion.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/clientset/versioned/typed/zalando.org/v1/zalando.org_client.go b/pkg/generated/clientset/versioned/typed/zalando.org/v1/zalando.org_client.go
index 7ba687058..e51ce2001 100644
--- a/pkg/generated/clientset/versioned/typed/zalando.org/v1/zalando.org_client.go
+++ b/pkg/generated/clientset/versioned/typed/zalando.org/v1/zalando.org_client.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/interface.go b/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/interface.go
index f914a49c7..df73137c1 100644
--- a/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/interface.go
+++ b/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/interface.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/interface.go b/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/interface.go
index b0c18ad53..6ba0dd635 100644
--- a/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/interface.go
+++ b/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/interface.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/postgresql.go b/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/postgresql.go
index ca662e540..e7cdaac3d 100644
--- a/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/postgresql.go
+++ b/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/postgresql.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/postgresteam.go b/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/postgresteam.go
index 24ad8df01..f06f5858f 100644
--- a/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/postgresteam.go
+++ b/pkg/generated/informers/externalversions/cpo.opensource.cybertec.at/v1/postgresteam.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/informers/externalversions/factory.go b/pkg/generated/informers/externalversions/factory.go
index 8ca28a7ef..e12eab80b 100644
--- a/pkg/generated/informers/externalversions/factory.go
+++ b/pkg/generated/informers/externalversions/factory.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/informers/externalversions/generic.go b/pkg/generated/informers/externalversions/generic.go
index c607ad6e0..087d4cf5c 100644
--- a/pkg/generated/informers/externalversions/generic.go
+++ b/pkg/generated/informers/externalversions/generic.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/informers/externalversions/internalinterfaces/factory_interfaces.go b/pkg/generated/informers/externalversions/internalinterfaces/factory_interfaces.go
index 4dabc58a6..a735e8a32 100644
--- a/pkg/generated/informers/externalversions/internalinterfaces/factory_interfaces.go
+++ b/pkg/generated/informers/externalversions/internalinterfaces/factory_interfaces.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/informers/externalversions/zalando.org/interface.go b/pkg/generated/informers/externalversions/zalando.org/interface.go
index f63e0f5e6..3f1f1f8c4 100644
--- a/pkg/generated/informers/externalversions/zalando.org/interface.go
+++ b/pkg/generated/informers/externalversions/zalando.org/interface.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/informers/externalversions/zalando.org/v1/fabriceventstream.go b/pkg/generated/informers/externalversions/zalando.org/v1/fabriceventstream.go
index dd450ef30..c6c7d2e52 100644
--- a/pkg/generated/informers/externalversions/zalando.org/v1/fabriceventstream.go
+++ b/pkg/generated/informers/externalversions/zalando.org/v1/fabriceventstream.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/informers/externalversions/zalando.org/v1/interface.go b/pkg/generated/informers/externalversions/zalando.org/v1/interface.go
index 290809a9b..771de4a42 100644
--- a/pkg/generated/informers/externalversions/zalando.org/v1/interface.go
+++ b/pkg/generated/informers/externalversions/zalando.org/v1/interface.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/listers/cpo.opensource.cybertec.at/v1/expansion_generated.go b/pkg/generated/listers/cpo.opensource.cybertec.at/v1/expansion_generated.go
index e7eefa957..dff5ce3f1 100644
--- a/pkg/generated/listers/cpo.opensource.cybertec.at/v1/expansion_generated.go
+++ b/pkg/generated/listers/cpo.opensource.cybertec.at/v1/expansion_generated.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/listers/cpo.opensource.cybertec.at/v1/postgresql.go b/pkg/generated/listers/cpo.opensource.cybertec.at/v1/postgresql.go
index c3ed09335..9db4a5959 100644
--- a/pkg/generated/listers/cpo.opensource.cybertec.at/v1/postgresql.go
+++ b/pkg/generated/listers/cpo.opensource.cybertec.at/v1/postgresql.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/listers/cpo.opensource.cybertec.at/v1/postgresteam.go b/pkg/generated/listers/cpo.opensource.cybertec.at/v1/postgresteam.go
index 959f6c808..0002f702d 100644
--- a/pkg/generated/listers/cpo.opensource.cybertec.at/v1/postgresteam.go
+++ b/pkg/generated/listers/cpo.opensource.cybertec.at/v1/postgresteam.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/listers/zalando.org/v1/expansion_generated.go b/pkg/generated/listers/zalando.org/v1/expansion_generated.go
index ea9d331ff..201fa4ecf 100644
--- a/pkg/generated/listers/zalando.org/v1/expansion_generated.go
+++ b/pkg/generated/listers/zalando.org/v1/expansion_generated.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/generated/listers/zalando.org/v1/fabriceventstream.go b/pkg/generated/listers/zalando.org/v1/fabriceventstream.go
index 5d65d0aa6..3667f82b7 100644
--- a/pkg/generated/listers/zalando.org/v1/fabriceventstream.go
+++ b/pkg/generated/listers/zalando.org/v1/fabriceventstream.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2024 Compose, Zalando SE
+Copyright 2025 Compose, Zalando SE
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/pkg/spec/types.go b/pkg/spec/types.go
index 023f9660f..3d6973c7a 100644
--- a/pkg/spec/types.go
+++ b/pkg/spec/types.go
@@ -33,6 +33,7 @@ const (
 	RoleOriginSystem
 	RoleOriginBootstrap
 	RoleOriginConnectionPooler
+	RoleMonitoring
 	RoleOriginStream
 )
 
@@ -198,6 +199,8 @@ func (r RoleOrigin) String() string {
 		return "bootstrapped role"
 	case RoleOriginConnectionPooler:
 		return "connection pooler role"
+	case RoleMonitoring:
+		return "Monitoring role"
 	default:
 		panic(fmt.Sprintf("bogus role origin value %d", r))
 	}
diff --git a/pkg/util/constants/roles.go b/pkg/util/constants/roles.go
index 34f1d0737..17c2355dc 100644
--- a/pkg/util/constants/roles.go
+++ b/pkg/util/constants/roles.go
@@ -6,6 +6,7 @@ const (
 	SuperuserKeyName            = "superuser"
 	ReplicationUserKeyName      = "replication"
 	ConnectionPoolerUserKeyName = "pooler"
+	MonitoringUserKeyName       = "cpo_exporter"
 	EventStreamUserKeyName      = "streamer"
 	RoleFlagSuperuser           = "SUPERUSER"
 	RoleFlagInherit             = "INHERIT"