PendingReleaseNotes: add note for cephx upgrade

Signed-off-by: Patrick Donnelly <pdonnell@ibm.com>

diff --git a/PendingReleaseNotes b/PendingReleaseNotes
index fa7653e39b2797dbc4356d1838fc1ef00a764605..cc8782ce82a821f4145012307db90bffd43d0260 100644 (file)
--- a/PendingReleaseNotes
+++ b/PendingReleaseNotes
@@ -11,6 +11,10 @@
 * CephFS: The `peer_add` command is deprecated in favor of the `peer_bootstrap` command.
 >=21.0.0
 
+* CephX: a new key type ``aes256k`` has been introduced to address
+  vulnerabilities in the existing encryption schemes. It is necessary to
+  perform an upgrade of all CephX keys used by daemons or clients. Please see
+  :ref:`cephx-upgrade` for more information.
 * The ``auth_supported`` config has been removed.
 
 >=20.0.0