diff --git a/CHANGELOG.md b/CHANGELOG.md
index ba0e112ab..125d3103a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -33,6 +33,11 @@ but will be removed in future release.
 been added to set CHAP authentication for discovery sessions and existing
 target nodes, respectively.
 
+CHAP shared secret file is now loaded only once at startup. During run time
+CHAP shared secrets can be configured by new JSON RPCs `add_iscsi_auth_group`,
+`delete_iscsi_auth_group`, `add_secret_to_iscsi_auth_group`, and
+`delete_secret_from_iscsi_auth_group` instead.
+
 ## v18.07:
 
 ### bdev