Do credentials change when doing a mvn flex:generate?

The answer is - very little. Specifically, the https-keystore.jks  and https-truststore.jksfiles are regenerated. This is mostly done because there may have been a flex package mix change in the manifest. The quantity and name of the flex packages directly influence the SAN values in the cert in this keystore. As a result of regenerating these keystores, the keystore password value changes in the credentials report. That's it. This should not affect DB.

However, since the nature of https connection to the config server has changed, it is generally recommended that you stop/start your flex packages and stop docker and redeploy when these updates are made.