diff --git a/states/etcd_connect.go b/states/etcd_connect.go
index 3352422..25fb1c6 100644
--- a/states/etcd_connect.go
+++ b/states/etcd_connect.go
@@ -51,6 +51,8 @@ type ConnectParams struct {
 	RootCA              string `name:"rootCAPem" default:"" desc:"root CA pem file path"`
 	ETCDPem             string `name:"etcdCert" default:"" desc:"etcd tls cert file path"`
 	ETCDKey             string `name:"etcdKey" default:"" desc:"etcd tls key file path"`
+	ETCDUserName        string `name:"etcdUserName" default:"" desc:"etcd credential username"`
+	ETCDPassword        string `name:"etcdPassword" default:"" desc:"etcd creidentail password"`
 	Auto                bool   `name:"auto" default:"false" desc:"auto detect rootPath if possible"`
 }
 
@@ -115,6 +117,9 @@ func (s *disconnectState) ConnectCommand(ctx context.Context, cp *ConnectParams)
 			grpc.WithBlock(),
 		},
 
+		Username: cp.ETCDUserName,
+		Password: cp.ETCDPassword,
+
 		TLS: tls,
 		// disable grpc logging
 		Logger: zap.NewNop(),