diff --git a/CHANGELOG.md b/CHANGELOG.md
index cc7b6ead4612..af7d3c165307 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,8 @@ IMPROVEMENTS:
 * authentication: requesting a token using the audience address [GH-2381]
 * authentication: switching to request tokens from the Azure CLI [GH-2387]
 * sdk: upgrading to version `2018-05-01` of the Policy API [GH-2386]
+* Data Source: `azurerm_kubernetes_cluster` - support for Role Based Access Control without Azure AD [GH-2495]
+* Data Source: `azurerm_kubernetes_cluster` - exposing the `clusterAdmin` credentials [GH-2495]
 * Data Source: `azurerm_subscriptions` - ability to filtering by prefix/contains on the Display Name [GH-2429]
 * `azurerm_app_service` - support for configuring `app_command_line` in the `site_config` block [GH-2350]
 * `azurerm_app_service_plan` - deprecated the `properties` and moved `app_service_environment_id`, `per_site_scaling` and `reserved` to the top level  [GH-2442]
@@ -20,6 +22,8 @@ IMPROVEMENTS:
 * `azurerm_application_insights` - added `Node.JS` application type [GH-2407]
 * `azurerm_container_registry` - support for geo-replication via the `georeplication_locations` property [GH-2055]
 * `azurerm_key_vault` - exposed `backup` and `restore` permissions made `key_permissions` and `secret_permissions` optional [GH-2363]
+* `azurerm_kubernetes_cluster` - support for Role Based Access Control without Azure AD [GH-2495]
+* `azurerm_kubernetes_cluster` - exposing the `clusterAdmin` credentials [GH-2495]
 * `azurerm_mssql_elasticpool` - deprecated the `elastic_pool_properties` property and moved `max_size_bytes` and `zone_redundant` to the top level [GH-2378]
 * `azurerm_mysql_server` - support for new skus `GP_Gen5_64` and `MO_Gen5_32` [GH-2446]
 * `azurerm_postgresql_server` support for new skus `GP_Gen5_64` and `MO_Gen5_32` - [GH-2447]