diff --git a/releasenotes/notes/lock_policy-75bea372036acbd5.yaml b/releasenotes/notes/lock_policy-75bea372036acbd5.yaml
new file mode 100644
index 000000000000..3b9cf99913c3
--- /dev/null
+++ b/releasenotes/notes/lock_policy-75bea372036acbd5.yaml
@@ -0,0 +1,6 @@
+---
+upgrade:
+  - Default RBAC policy for lock operations has been modified to
+    admin_or_owner for the stable V2.0 API. Please understand to modify the
+    policy if you still keep to have anyone to lock an instance and you're
+    still using the stable API endpoint.