diff --git a/docs/releases/1.27-NOTES.md b/docs/releases/1.27-NOTES.md
index 34956472d7..296a595581 100644
--- a/docs/releases/1.27-NOTES.md
+++ b/docs/releases/1.27-NOTES.md
@@ -14,6 +14,8 @@ This behaviour can be overridden by setting `spec.etcdClusters[*].manager.backup
 * As of Kubernetes version 1.27, all nodes will default to running with instance-metadata-service tokens required, with a max hop limit of 1.
 Newly created clusters will be configured as necessary to have these settings.
 
+* As of Kubernetes version 1.27, credentials for private ECR repositories will be handled by the out-of-tree credential provider. This is an additional binary that each instance downloads from the assets repository.
+
 ## GCP
 
 ## Openstack