diff --git a/doc/source/release-notes/2023.2-bobcat.rst b/doc/source/release-notes/2023.2-bobcat.rst
index b8185f8c..814a9f9d 100644
--- a/doc/source/release-notes/2023.2-bobcat.rst
+++ b/doc/source/release-notes/2023.2-bobcat.rst
@@ -62,6 +62,20 @@ For example, to set the role cache expiration time to 10 seconds do:
 The result of this being that keystone will only used cached role assignments for up to
 10 seconds before refreshing them from the database.
 
+Designate-bind allow transfer config
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+The designate-bind charm now supports configuring BIND9 [allow-transfer].
+If not set, this defaults to none, which disable allow-transfer.
+
+For example, to set BIND9 allow-transfer to 10.0.0.0/8 and 172.16.0.0/16:
+
+.. code-block:: none
+
+   juju config designate-bind allow_transfer_nets="10.0.0.0/8;172.16.0.0/12"
+
+This will allow designate-bind to perform zone transfer to 10.0.0.0/8 and 172.16.0.0/12.
+
 Documentation updates
 ---------------------