diff --git a/CHANGELOG.md b/CHANGELOG.md
index 60b36b9b..cce6f095 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 - Support for CloudKMS RSA-PSS signers without using templates.
 - Add flags to support individual passwords for the intermediate and SSH keys.
 - Global support for group admins in the OIDC provisioner.
+- Support host-only or user-only SSH CA.
 ### Changed
 - Using go 1.17 for binaries
 ### Deprecated