diff --git a/charts/postgres-operator-ui/index.yaml b/charts/postgres-operator-ui/index.yaml
index fb01475ee..98bd89a9a 100644
--- a/charts/postgres-operator-ui/index.yaml
+++ b/charts/postgres-operator-ui/index.yaml
@@ -3,10 +3,10 @@ entries:
   postgres-operator-ui:
   - apiVersion: v2
     appVersion: 2.0.0
-    created: "2026-07-27T16:59:53.405736+02:00"
+    created: "2026-07-28T16:30:58.763571+02:00"
     description: Postgres Operator UI provides a graphical interface for a convenient
       database-as-a-service user experience
-    digest: 37d2392421822a6dfeed20f3ea40420c52e4e4aaf90354d20aa27175fbad6c29
+    digest: 80098eb9290d77fcaaf813347386c3b7d34de0d4e846b50ac177d4ac4a9e2ecb
     home: https://github.com/zalando/postgres-operator
     keywords:
     - postgres
@@ -26,7 +26,7 @@ entries:
     version: 2.0.0
   - apiVersion: v2
     appVersion: 1.15.1
-    created: "2026-07-27T16:59:53.405452+02:00"
+    created: "2026-07-28T16:30:58.7632+02:00"
     description: Postgres Operator UI provides a graphical interface for a convenient
       database-as-a-service user experience
     digest: 4bbb750934366038d692711f924151182b7be131b6822d011f5a4e51cf609482
@@ -49,7 +49,7 @@ entries:
     version: 1.15.1
   - apiVersion: v2
     appVersion: 1.14.0
-    created: "2026-07-27T16:59:53.405196+02:00"
+    created: "2026-07-28T16:30:58.76293+02:00"
     description: Postgres Operator UI provides a graphical interface for a convenient
       database-as-a-service user experience
     digest: e87ed898079a852957a67a4caf3fbd27b9098e413f5d961b7a771a6ae8b3e17c
@@ -72,7 +72,7 @@ entries:
     version: 1.14.0
   - apiVersion: v2
     appVersion: 1.13.0
-    created: "2026-07-27T16:59:53.404946+02:00"
+    created: "2026-07-28T16:30:58.762624+02:00"
     description: Postgres Operator UI provides a graphical interface for a convenient
       database-as-a-service user experience
     digest: e0444e516b50f82002d1a733527813c51759a627cefdd1005cea73659f824ea8
@@ -95,7 +95,7 @@ entries:
     version: 1.13.0
   - apiVersion: v2
     appVersion: 1.12.2
-    created: "2026-07-27T16:59:53.404693+02:00"
+    created: "2026-07-28T16:30:58.762247+02:00"
     description: Postgres Operator UI provides a graphical interface for a convenient
       database-as-a-service user experience
     digest: cbcef400c23ccece27d97369ad629278265c013e0a45c0b7f33e7568a082fedd
@@ -118,7 +118,7 @@ entries:
     version: 1.12.2
   - apiVersion: v2
     appVersion: 1.11.0
-    created: "2026-07-27T16:59:53.40439+02:00"
+    created: "2026-07-28T16:30:58.761377+02:00"
     description: Postgres Operator UI provides a graphical interface for a convenient
       database-as-a-service user experience
     digest: a45f2284045c2a9a79750a36997386444f39b01ac722b17c84b431457577a3a2
@@ -139,4 +139,4 @@ entries:
     urls:
     - postgres-operator-ui-1.11.0.tgz
     version: 1.11.0
-generated: "2026-07-27T16:59:53.404012+02:00"
+generated: "2026-07-28T16:30:58.760884+02:00"
diff --git a/charts/postgres-operator-ui/postgres-operator-ui-2.0.0.tgz b/charts/postgres-operator-ui/postgres-operator-ui-2.0.0.tgz
index 8faf30155..66886b83a 100644
Binary files a/charts/postgres-operator-ui/postgres-operator-ui-2.0.0.tgz and b/charts/postgres-operator-ui/postgres-operator-ui-2.0.0.tgz differ
diff --git a/charts/postgres-operator-ui/templates/deployment.yaml b/charts/postgres-operator-ui/templates/deployment.yaml
index d4a2a88b8..a5729fcdc 100644
--- a/charts/postgres-operator-ui/templates/deployment.yaml
+++ b/charts/postgres-operator-ui/templates/deployment.yaml
@@ -88,7 +88,7 @@ spec:
                     "17",
                     "16",
                     "15",
-                    "14",
+                    "14"
                   ]
                 }
             {{- if .Values.extraEnvs }}
diff --git a/charts/postgres-operator/crds/operatorconfigurations.yaml b/charts/postgres-operator/crds/operatorconfigurations.yaml
index 68a934cf9..5084b72aa 100644
--- a/charts/postgres-operator/crds/operatorconfigurations.yaml
+++ b/charts/postgres-operator/crds/operatorconfigurations.yaml
@@ -226,24 +226,7 @@ spec:
                       type: string
                     type: array
                   infrastructure_roles_secret_name:
-                    description: |-
-                      NamespacedName comprises a resource name, with a mandatory namespace,
-                      rendered as "<namespace>/<name>".  Being a type captures intent and
-                      helps make sure that UIDs, namespaced names and non-namespaced names
-                      do not get conflated in code.  For most use cases, namespace and name
-                      will already have been format validated at the API entry point, so we
-                      don't do that here.  Where that's not the case (e.g. in testing),
-                      consider using NamespacedNameOrDie() in testing.go in this package.
-
-                      from: https://github.com/kubernetes/apimachinery/blob/master/pkg/types/namespacedname.go
-                    properties:
-                      name:
-                        type: string
-                      namespace:
-                        type: string
-                    required:
-                    - name
-                    type: object
+                    type: string
                   infrastructure_roles_secrets:
                     description: namespaced name of the secret containing infrastructure
                       roles names and passwords
@@ -265,14 +248,7 @@ spec:
                           description: |-
                             Name of a secret which describes the role, and optionally name of a
                             configmap with an extra information
-                          properties:
-                            name:
-                              type: string
-                            namespace:
-                              type: string
-                          required:
-                          - name
-                          type: object
+                          type: string
                         template:
                           type: boolean
                         userkey:
@@ -458,14 +434,7 @@ spec:
                     default: postgres-operator
                     description: namespaced name of the secret containing the OAuth2
                       token to pass to the teams API
-                    properties:
-                      name:
-                        type: string
-                      namespace:
-                        type: string
-                    required:
-                    - name
-                    type: object
+                    type: string
                   pdb_master_label_selector:
                     default: true
                     type: boolean
@@ -485,14 +454,7 @@ spec:
                   pod_environment_configmap:
                     description: namespaced name of the ConfigMap with environment
                       variables to populate on every pod
-                    properties:
-                      name:
-                        type: string
-                      namespace:
-                        type: string
-                    required:
-                    - name
-                    type: object
+                    type: string
                   pod_environment_secret:
                     type: string
                   pod_management_policy:
diff --git a/charts/postgres-operator/index.yaml b/charts/postgres-operator/index.yaml
index 7f54a08c4..d85e6f3c0 100644
--- a/charts/postgres-operator/index.yaml
+++ b/charts/postgres-operator/index.yaml
@@ -3,10 +3,10 @@ entries:
   postgres-operator:
   - apiVersion: v2
     appVersion: 2.0.0
-    created: "2026-07-27T16:59:31.277476+02:00"
+    created: "2026-07-28T16:30:13.110262+02:00"
     description: Postgres Operator creates and manages PostgreSQL clusters running
       in Kubernetes
-    digest: 488ae36a71c075ebee4b759f52db31029d559cab20efb329cf151f206087deaf
+    digest: 2622899b573e4c46cd2a70677d5941a9e5da24c7db2a0ff774ddc49ad9d5c544
     home: https://github.com/zalando/postgres-operator
     keywords:
     - postgres
@@ -25,7 +25,7 @@ entries:
     version: 2.0.0
   - apiVersion: v2
     appVersion: 1.15.1
-    created: "2026-07-27T16:59:31.276117+02:00"
+    created: "2026-07-28T16:30:13.108848+02:00"
     description: Postgres Operator creates and manages PostgreSQL clusters running
       in Kubernetes
     digest: 9f3edc3d796105c02c04eaae28a78e58fb08c1847a9de012245fd6ac2c0d2c00
@@ -47,7 +47,7 @@ entries:
     version: 1.15.1
   - apiVersion: v2
     appVersion: 1.15.0
-    created: "2026-07-27T16:59:31.275355+02:00"
+    created: "2026-07-28T16:30:13.108147+02:00"
     description: Postgres Operator creates and manages PostgreSQL clusters running
       in Kubernetes
     digest: 002dd47647bf51fbba023bd1762d807be478cf37de7a44b80cd01ac1f20bd94a
@@ -69,7 +69,7 @@ entries:
     version: 1.15.0
   - apiVersion: v2
     appVersion: 1.14.0
-    created: "2026-07-27T16:59:31.274572+02:00"
+    created: "2026-07-28T16:30:13.107421+02:00"
     description: Postgres Operator creates and manages PostgreSQL clusters running
       in Kubernetes
     digest: 36e1571f3f455b213f16cdda7b1158648e8e84deb804ba47ed6b9b6d19263ba8
@@ -91,7 +91,7 @@ entries:
     version: 1.14.0
   - apiVersion: v2
     appVersion: 1.13.0
-    created: "2026-07-27T16:59:31.273293+02:00"
+    created: "2026-07-28T16:30:13.106643+02:00"
     description: Postgres Operator creates and manages PostgreSQL clusters running
       in Kubernetes
     digest: a839601689aea0a7e6bc0712a5244d435683cf3314c95794097ff08540e1dfef
@@ -113,7 +113,7 @@ entries:
     version: 1.13.0
   - apiVersion: v2
     appVersion: 1.12.2
-    created: "2026-07-27T16:59:31.272505+02:00"
+    created: "2026-07-28T16:30:13.105204+02:00"
     description: Postgres Operator creates and manages PostgreSQL clusters running
       in Kubernetes
     digest: 65858d14a40d7fd90c32bd9fc60021acc9555c161079f43a365c70171eaf21d8
@@ -135,7 +135,7 @@ entries:
     version: 1.12.2
   - apiVersion: v2
     appVersion: 1.11.0
-    created: "2026-07-27T16:59:31.271511+02:00"
+    created: "2026-07-28T16:30:13.104449+02:00"
     description: Postgres Operator creates and manages PostgreSQL clusters running
       in Kubernetes
     digest: 3914b5e117bda0834f05c9207f007e2ac372864cf6e86dcc2e1362bbe46c14d9
@@ -155,4 +155,4 @@ entries:
     urls:
     - postgres-operator-1.11.0.tgz
     version: 1.11.0
-generated: "2026-07-27T16:59:31.270324+02:00"
+generated: "2026-07-28T16:30:13.103286+02:00"
diff --git a/charts/postgres-operator/postgres-operator-2.0.0.tgz b/charts/postgres-operator/postgres-operator-2.0.0.tgz
index 99a223b4b..2b65213ce 100644
Binary files a/charts/postgres-operator/postgres-operator-2.0.0.tgz and b/charts/postgres-operator/postgres-operator-2.0.0.tgz differ
diff --git a/manifests/operatorconfiguration.crd.yaml b/manifests/operatorconfiguration.crd.yaml
index 68a934cf9..5084b72aa 100644
--- a/manifests/operatorconfiguration.crd.yaml
+++ b/manifests/operatorconfiguration.crd.yaml
@@ -226,24 +226,7 @@ spec:
                       type: string
                     type: array
                   infrastructure_roles_secret_name:
-                    description: |-
-                      NamespacedName comprises a resource name, with a mandatory namespace,
-                      rendered as "<namespace>/<name>".  Being a type captures intent and
-                      helps make sure that UIDs, namespaced names and non-namespaced names
-                      do not get conflated in code.  For most use cases, namespace and name
-                      will already have been format validated at the API entry point, so we
-                      don't do that here.  Where that's not the case (e.g. in testing),
-                      consider using NamespacedNameOrDie() in testing.go in this package.
-
-                      from: https://github.com/kubernetes/apimachinery/blob/master/pkg/types/namespacedname.go
-                    properties:
-                      name:
-                        type: string
-                      namespace:
-                        type: string
-                    required:
-                    - name
-                    type: object
+                    type: string
                   infrastructure_roles_secrets:
                     description: namespaced name of the secret containing infrastructure
                       roles names and passwords
@@ -265,14 +248,7 @@ spec:
                           description: |-
                             Name of a secret which describes the role, and optionally name of a
                             configmap with an extra information
-                          properties:
-                            name:
-                              type: string
-                            namespace:
-                              type: string
-                          required:
-                          - name
-                          type: object
+                          type: string
                         template:
                           type: boolean
                         userkey:
@@ -458,14 +434,7 @@ spec:
                     default: postgres-operator
                     description: namespaced name of the secret containing the OAuth2
                       token to pass to the teams API
-                    properties:
-                      name:
-                        type: string
-                      namespace:
-                        type: string
-                    required:
-                    - name
-                    type: object
+                    type: string
                   pdb_master_label_selector:
                     default: true
                     type: boolean
@@ -485,14 +454,7 @@ spec:
                   pod_environment_configmap:
                     description: namespaced name of the ConfigMap with environment
                       variables to populate on every pod
-                    properties:
-                      name:
-                        type: string
-                      namespace:
-                        type: string
-                    required:
-                    - name
-                    type: object
+                    type: string
                   pod_environment_secret:
                     type: string
                   pod_management_policy:
diff --git a/pkg/apis/acid.zalan.do/v1/operatorconfiguration.crd.yaml b/pkg/apis/acid.zalan.do/v1/operatorconfiguration.crd.yaml
index 68a934cf9..5084b72aa 100644
--- a/pkg/apis/acid.zalan.do/v1/operatorconfiguration.crd.yaml
+++ b/pkg/apis/acid.zalan.do/v1/operatorconfiguration.crd.yaml
@@ -226,24 +226,7 @@ spec:
                       type: string
                     type: array
                   infrastructure_roles_secret_name:
-                    description: |-
-                      NamespacedName comprises a resource name, with a mandatory namespace,
-                      rendered as "<namespace>/<name>".  Being a type captures intent and
-                      helps make sure that UIDs, namespaced names and non-namespaced names
-                      do not get conflated in code.  For most use cases, namespace and name
-                      will already have been format validated at the API entry point, so we
-                      don't do that here.  Where that's not the case (e.g. in testing),
-                      consider using NamespacedNameOrDie() in testing.go in this package.
-
-                      from: https://github.com/kubernetes/apimachinery/blob/master/pkg/types/namespacedname.go
-                    properties:
-                      name:
-                        type: string
-                      namespace:
-                        type: string
-                    required:
-                    - name
-                    type: object
+                    type: string
                   infrastructure_roles_secrets:
                     description: namespaced name of the secret containing infrastructure
                       roles names and passwords
@@ -265,14 +248,7 @@ spec:
                           description: |-
                             Name of a secret which describes the role, and optionally name of a
                             configmap with an extra information
-                          properties:
-                            name:
-                              type: string
-                            namespace:
-                              type: string
-                          required:
-                          - name
-                          type: object
+                          type: string
                         template:
                           type: boolean
                         userkey:
@@ -458,14 +434,7 @@ spec:
                     default: postgres-operator
                     description: namespaced name of the secret containing the OAuth2
                       token to pass to the teams API
-                    properties:
-                      name:
-                        type: string
-                      namespace:
-                        type: string
-                    required:
-                    - name
-                    type: object
+                    type: string
                   pdb_master_label_selector:
                     default: true
                     type: boolean
@@ -485,14 +454,7 @@ spec:
                   pod_environment_configmap:
                     description: namespaced name of the ConfigMap with environment
                       variables to populate on every pod
-                    properties:
-                      name:
-                        type: string
-                      namespace:
-                        type: string
-                    required:
-                    - name
-                    type: object
+                    type: string
                   pod_environment_secret:
                     type: string
                   pod_management_policy:
diff --git a/pkg/spec/types.go b/pkg/spec/types.go
index 3f4abb70f..642f3fd9b 100644
--- a/pkg/spec/types.go
+++ b/pkg/spec/types.go
@@ -23,6 +23,11 @@ import (
 // consider using NamespacedNameOrDie() in testing.go in this package.
 //
 // from: https://github.com/kubernetes/apimachinery/blob/master/pkg/types/namespacedname.go
+//
+// NamespacedName marshals to and unmarshals from a plain JSON string
+// ("<namespace>/<name>") via its custom MarshalJSON/UnmarshalJSON, so its CRD
+// schema must be a string rather than the struct controller-gen would infer.
+// +kubebuilder:validation:Type=string
 type NamespacedName struct {
 	Namespace string `json:"namespace,omitempty"`
 	Name      string `json:"name"`
diff --git a/ui/run_local.sh b/ui/run_local.sh
index 13d8f053a..917f1dc50 100755
--- a/ui/run_local.sh
+++ b/ui/run_local.sh
@@ -35,7 +35,7 @@ default_operator_ui_config='{
     "17",
     "16",
     "15",
-    "14",
+    "14"
   ],
   "static_network_whitelist": {
     "localhost": ["172.0.0.1/32"]