diff --git a/releasenotes/notes/deprecate-apt-keys-eff6e68272923b6b.yaml b/releasenotes/notes/deprecate-apt-keys-eff6e68272923b6b.yaml
new file mode 100644
index 0000000000..3f5b56b133
--- /dev/null
+++ b/releasenotes/notes/deprecate-apt-keys-eff6e68272923b6b.yaml
@@ -0,0 +1,7 @@
+---
+deprecations:
+  - |
+    Using APT keys as list of GnuPG ids (via ``apt_keys`` template override) is
+    deprecated since Wallaby release and support for them will be dropped in
+    Xena cycle. If you used this in your template overrides then please migrate
+    into ``remote_apt_keys`` + entries in ``repos.yaml`` file.