PendingReleaseNotes: add note for cephx upgrade

Signed-off-by: Patrick Donnelly <pdonnell@ibm.com>
(cherry picked from commit af2ab5810c7336dc9a35bba06e256b90982d7f7d)

diff --git a/PendingReleaseNotes b/PendingReleaseNotes
index 5d005b846a3949f114ae8084b5335dd196d3276d..dbbe2beb7d3016c1b0bf8cfe51478e32ede9e526 100644 (file)
--- a/PendingReleaseNotes
+++ b/PendingReleaseNotes
@@ -10,6 +10,10 @@
   adjusting FEATURE_TOGGLE_DASHBOARD.
 >=21.0.0
 
+* CephX: a new key type ``aes256k`` has been introduced to address
+  vulnerabilities in the existing encryption schemes. It is necessary to
+  perform an upgrade of all CephX keys used by daemons or clients. Please see
+  :ref:`cephx-upgrade` for more information.
 * The ``auth_supported`` config has been removed.
 
 >=20.0.0