diff --git a/releasenotes/notes/bp-secure-etcd-cluster-coe-5abd22546f05a85b.yaml b/releasenotes/notes/bp-secure-etcd-cluster-coe-5abd22546f05a85b.yaml
new file mode 100644
index 0000000000..ecc30ad8a9
--- /dev/null
+++ b/releasenotes/notes/bp-secure-etcd-cluster-coe-5abd22546f05a85b.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - |
+    Secure etcd cluster for swarm and k8s. Etcd cluster is
+    secured using TLS by default. TLS can be disabled by
+    passing --tls-disabled during cluster template creation.