diff --git a/.changeset/afraid-apes-smell.md b/.changeset/afraid-apes-smell.md
new file mode 100644
index 0000000000..2654351ad8
--- /dev/null
+++ b/.changeset/afraid-apes-smell.md
@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-kubernetes': patch
+'@backstage/plugin-kubernetes-common': patch
+---
+
+Loosened the type of the `auth` field in the body of requests to the `retrieveObjectsByServiceId` endpoint. Now any JSON object is allowed, which should make it easier for integrators to write their own custom auth strategies for Kubernetes.
diff --git a/.changeset/new-frogs-punch.md b/.changeset/new-frogs-punch.md
new file mode 100644
index 0000000000..f4390e72c6
--- /dev/null
+++ b/.changeset/new-frogs-punch.md
@@ -0,0 +1,7 @@
+---
+'@backstage/plugin-kubernetes-backend': minor
+---
+
+Integrators can now bring their own auth strategies through the use of the `addAuthStrategy` method on `KubernetesBuilder`.
+
+**BREAKING** on the slight chance you were using the `setAuthTranslatorMap` method on `KubernetesBuilder`, it has been removed along with the entire `KubernetesAuthTranslator` interface. This notion has been replaced with the more focused concept of an `AuthenticationStrategy`. Converting a translator to a strategy should not be especially difficult.