PendingReleaseNotes: note rgw's compress-encrypted zonegroup feature flag

Signed-off-by: Casey Bodley <cbodley@redhat.com>

diff --git a/PendingReleaseNotes b/PendingReleaseNotes
index dabb3f1b6c2715599236dc863f7059033da76499..12c7a90a83e360c12255421fe7c3aa9f8b27acc5 100644 (file)
--- a/PendingReleaseNotes
+++ b/PendingReleaseNotes
@@ -77,7 +77,11 @@
   map and unmap images in namespaces using the `image-spec` syntax since then
   but the corresponding option available in most other commands was missing.
 * RGW: Compression is now supported for objects uploaded with Server-Side Encryption.
-  When both are enabled, compression is applied before encryption.
+  When both are enabled, compression is applied before encryption. Earlier releases
+  of multisite do not replicate such objects correctly, so all zones must upgrade to
+  Reef before enabling the `compress-encrypted` zonegroup feature: see
+  https://docs.ceph.com/en/reef/radosgw/multisite/#zone-features and note the
+  security considerations.
 * RGW: the "pubsub" functionality for storing bucket notifications inside Ceph
   is removed. Together with it, the "pubsub" zone should not be used anymore.
   The REST operations, as well as radosgw-admin commands for manipulating