From 4218e7308c6ef98246c4a922383d79ac1f6f8d4b Mon Sep 17 00:00:00 2001 From: Patrick Donnelly Date: Tue, 29 Jul 2025 22:31:05 -0400 Subject: [PATCH] PendingReleaseNotes: add note for cephx upgrade Signed-off-by: Patrick Donnelly --- PendingReleaseNotes | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/PendingReleaseNotes b/PendingReleaseNotes index fa7653e39b2..cc8782ce82a 100644 --- a/PendingReleaseNotes +++ b/PendingReleaseNotes @@ -11,6 +11,10 @@ * CephFS: The `peer_add` command is deprecated in favor of the `peer_bootstrap` command. >=21.0.0 +* CephX: a new key type ``aes256k`` has been introduced to address + vulnerabilities in the existing encryption schemes. It is necessary to + perform an upgrade of all CephX keys used by daemons or clients. Please see + :ref:`cephx-upgrade` for more information. * The ``auth_supported`` config has been removed. >=20.0.0 -- 2.39.5