From: Patrick Donnelly <pdonnell@ibm.com>
Date: Wed, 30 Jul 2025 02:31:05 +0000 (-0400)
Subject: PendingReleaseNotes: add note for cephx upgrade
X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=4218e7308c6ef98246c4a922383d79ac1f6f8d4b;p=ceph-ci.git

PendingReleaseNotes: add note for cephx upgrade

Signed-off-by: Patrick Donnelly <pdonnell@ibm.com>
---

diff --git a/PendingReleaseNotes b/PendingReleaseNotes
index fa7653e39b2..cc8782ce82a 100644
--- a/PendingReleaseNotes
+++ b/PendingReleaseNotes
@@ -11,6 +11,10 @@
 * CephFS: The `peer_add` command is deprecated in favor of the `peer_bootstrap` command.
 >=21.0.0
 
+* CephX: a new key type ``aes256k`` has been introduced to address
+  vulnerabilities in the existing encryption schemes. It is necessary to
+  perform an upgrade of all CephX keys used by daemons or clients. Please see
+  :ref:`cephx-upgrade` for more information.
 * The ``auth_supported`` config has been removed.
 
 >=20.0.0